123.245.85.17📋 Copy

# IP Intelligence Briefing: 123.245.85.17/32

## Executive Summary

IP 123.245.85.17 is classified as LOW RISK with a risk score of 25. This is a residential mobile endpoint associated with China Telecom's Liaoning Branch infrastructure. No active threat indicators were detected, though recent port scanning activity was observed.

## Threat Profile

Risk Assessment:

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not elevated
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

Infrastructure Classification:

• ASN: 4134 (CHINANET-LN Network Administrator Chinatelecom Liaoning Branch)
• Network Name: JunQu2
• CIDR Block: 123.245.64.0/19
• RIR: APNIC
• Infrastructure Type: Residential
• Connection Type: Mobile (China Telecom LTE/5G)
• Mobile Carrier: China Telecom Corp. Ltd. (MCC: 460, MNC: 03)

Geolocation:

• Country: China (CN)
• Region: Liaoning (LN)
• City: Heping
• Accuracy Radius: 2,500 km (single-source consensus)
• Geo Validation: Plausible but not confirmed

Network Services:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Title: None
• Hosted Domains: 0

## Threat Indicators

Blacklist Status:

• DNSBL Listed: 1 of 8 lists
• Blacklist Count: 0
• Threat Feeds: None
• Known Campaigns: None

Control Plane Data:

• Route Stability: False (but 0 route changes in 30 days)
• BGP Prefix: 123.244.0.0/14
• Operator Score: 0.1304 (Minimal)
• RPKI State: Not validated
• DNSSEC Valid: Yes

## Neighborhood Analysis (123.245.85.0/24)

Subnet Statistics:

• Total Siblings: 50
• Active Siblings: 22
• Threat Siblings: 6
• Abuse Density: 12%
• Classification: Mostly Clean

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 45

Notable Neighbors:

• 123.245.85.6: Risk Score 0
• 123.245.85.8: Risk Score 25
• 123.245.85.16: Risk Score 25
• 123.245.85.19: Risk Score 25
• 123.245.85.30: Risk Score 25

## Observation History

Temporal Analysis:

• Total Observations: 12
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No

Recent Activity (2026-07-28):

• 21:47:01 - Port scanning activity detected (confidence 0.70)
• 21:44:27 - Network classification confirmed as residential mobile (confidence 0.40)
• 21:43:34 - Ownership data refreshed (confidence 0.85)
• 21:43:24 - Geolocation/ASN data confirmed (confidence 0.95)

## Recommended Actions

Current Recommendations: None

• Risk score and profile indicate no immediate blocking required
• Monitor for escalation in threat indicators

Firewall Rules: Not required at this time

## Intelligence Conclusion

IP 123.245.85.17 represents a low-risk residential mobile endpoint from China Telecom's Liaoning infrastructure. The subnet shows moderate abuse density (12%) with 6 out of 50 siblings flagged as threats. Recent port scanning activity warrants monitoring but does not constitute confirmed malicious behavior. No established campaign affiliations or persistent threat patterns detected. Standard residential endpoint handling is appropriate; no immediate defensive actions required.

Classification: LOW RISK / RESIDENTIAL MOBILE ENDPOINT

Last Updated: 2026-07-28

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.