# 123.245.85.17 — IP Intelligence Summary

123.245.85.17 is an IPv4 address operated by CHINANET-LN Network Administrater Chinatelecom Liaoning Branch (AS4134), geolocated to Heping, China. It belongs to a mobile network. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/123.245.85.17
- Last updated: 2026-10-06

## Ownership

- Organization: CHINANET-LN Network Administrater Chinatelecom Liaoning Branch
- Network name: JunQu2
- Allocated block: 123.245.64.0/19
- ASN: AS4134 (https://ipdebrief.com/asn/4134)
- Regional registry: APNIC

## Location

- City: Heping
- Region: LN
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: Residential
- Datacenter / hosting: no
- Residential: yes
- Mobile: yes
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 123.245.85.17/32

\## Executive Summary

IP 123.245.85.17 is classified as **LOW RISK** with a risk score of 25. This is a residential mobile endpoint associated with China Telecom's Liaoning Branch infrastructure. No active threat indicators were detected, though recent port scanning activity was observed.

\## Threat Profile

**Risk Assessment:**

\- Overall Risk Score: 25 (Low Risk)

\- Provider Score: 0

\- Authority Score: 0

\- Abuse Confidence Score: Not elevated

\- Known Attacker: No

\- Spam Source: No

\- Tor Exit Node: No

**Infrastructure Classification:**

\- ASN: 4134 (CHINANET-LN Network Administrator Chinatelecom Liaoning Branch)

\- Network Name: JunQu2

\- CIDR Block: 123.245.64.0/19

\- RIR: APNIC

\- Infrastructure Type: Residential

\- Connection Type: Mobile (China Telecom LTE/5G)

\- Mobile Carrier: China Telecom Corp. Ltd. (MCC: 460, MNC: 03)

**Geolocation:**

\- Country: China (CN)

\- Region: Liaoning (LN)

\- City: Heping

\- Accuracy Radius: 2,500 km (single-source consensus)

\- Geo Validation: Plausible but not confirmed

**Network Services:**

\- Open Ports: None detected

\- TLS Certificate: None

\- HTTP Title: None

\- Hosted Domains: 0

\## Threat Indicators

**Blacklist Status:**

\- DNSBL Listed: 1 of 8 lists

\- Blacklist Count: 0

\- Threat Feeds: None

\- Known Campaigns: None

**Control Plane Data:**

\- Route Stability: False (but 0 route changes in 30 days)

\- BGP Prefix: 123.244.0.0/14

\- Operator Score: 0.1304 (Minimal)

\- RPKI State: Not validated

\- DNSSEC Valid: Yes

\## Neighborhood Analysis (123.245.85.0/24)

**Subnet Statistics:**

\- Total Siblings: 50

\- Active Siblings: 22

\- Threat Siblings: 6

\- Abuse Density: 12%

\- Classification: Mostly Clean

**Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 0

\- Low Risk: 45

**Notable Neighbors:**

\- 123.245.85.6: Risk Score 0

\- 123.245.85.8: Risk Score 25

\- 123.245.85.16: Risk Score 25

\- 123.245.85.19: Risk Score 25

\- 123.245.85.30: Risk Score 25

\## Observation History

**Temporal Analysis:**

\- Total Observations: 12

\- Ownership Changes: 0

\- Threat Persistence Days: 0

\- Persistently Malicious: No

**Recent Activity (2026-07-28):**

\- 21:47:01 - Port scanning activity detected (confidence 0.70)

\- 21:44:27 - Network classification confirmed as residential mobile (confidence 0.40)

\- 21:43:34 - Ownership data refreshed (confidence 0.85)

\- 21:43:24 - Geolocation/ASN data confirmed (confidence 0.95)

\## Recommended Actions

**Current Recommendations:** None

\- Risk score and profile indicate no immediate blocking required

\- Monitor for escalation in threat indicators

**Firewall Rules:** Not required at this time

\## Intelligence Conclusion

IP 123.245.85.17 represents a low-risk residential mobile endpoint from China Telecom's Liaoning infrastructure. The subnet shows moderate abuse density (12%) with 6 out of 50 siblings flagged as threats. Recent port scanning activity warrants monitoring but does not constitute confirmed malicious behavior. No established campaign affiliations or persistent threat patterns detected. Standard residential endpoint handling is appropriate; no immediate defensive actions required.

**Classification:** LOW RISK / RESIDENTIAL MOBILE ENDPOINT

**Last Updated:** 2026-07-28

## Nearby addresses

- 123.245.85.3 (https://ipdebrief.com/123.245.85.3)
- 123.245.85.6 (https://ipdebrief.com/123.245.85.6)
- 123.245.85.8 (https://ipdebrief.com/123.245.85.8)
- 123.245.85.9 (https://ipdebrief.com/123.245.85.9)
- 123.245.85.11 (https://ipdebrief.com/123.245.85.11)
- 123.245.85.13 (https://ipdebrief.com/123.245.85.13)
- 123.245.85.16 (https://ipdebrief.com/123.245.85.16)
- 123.245.85.19 (https://ipdebrief.com/123.245.85.19)
- 123.245.85.30 (https://ipdebrief.com/123.245.85.30)
- 123.245.85.36 (https://ipdebrief.com/123.245.85.36)
- 123.245.85.38 (https://ipdebrief.com/123.245.85.38)
- 123.245.85.40 (https://ipdebrief.com/123.245.85.40)

---

Source: IPDebrief, "123.245.85.17 IP intelligence", https://ipdebrief.com/123.245.85.17, updated 2026-10-06. Assessments are probabilistic.