58.23.78.61 is an IPv4 address operated by QUAN ZHOU (AS4837), geolocated to Quanzhou, China. It belongs to a mobile network. As of September 13, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
# Intelligence Briefing: IP 58.23.78.61
## Executive Summary
IP address 58.23.78.61 was assessed as moderate risk (score: 40/100) with no active threat indicators. The address is associated with China Unicom mobile carrier infrastructure in Fujian Province, China, and shows no evidence of malicious activity.
## Network Ownership & Classification
The IP belongs to ASN 4837 (QUAN ZHOU / CNCGROUP-FJ-QUANZHOU-MAN) within the APNIC RIR region. Geographic location was inferred as Quanzhou, Fujian Province, China (country code: CN). The address is classified as mobile carrier infrastructure (China Unicom, MCC: 460, MNC: 01) using LTE/5G technology.
## Threat Profile
- Risk Score: 40 (Moderate)
- Threat Indicators: None detected
- Blacklist Status: No active blacklists
- Known Attacker: False
- Tor Exit Node: False
- Spam Source: False
- Abuse Confidence Score: Not applicable
The control plane analysis showed route instability with the BGP prefix 58.22.0.0/15. The IP was listed on 2 of 8 DNSBLs. Operator score was rated minimal (0.1304).
## Service Analysis
No open ports were detected. The IP is classified as "Firewalled / No Services" with no TLS certificates, HTTP titles, or server banners observed. DNS analysis showed no PTR hostnames and no forward resolution, consistent with a carrier-grade mobile IP address.
## Neighborhood Assessment
The /24 subnet (58.23.78.0/24) contains 10 sibling IPs with an abuse density of 0. Risk distribution showed 3 medium-risk neighbors (score 40) and 6 low-risk neighbors (score 15-40). No high-risk neighbors were identified. The subnet classification remained "clean."
## Historical Observations
Thirteen signal observations were recorded, with the most recent activity occurring on 2026-07-24. Observations included network classification, geolocation inference (confidence: 0.52), ownership data (confidence: 0.95), and subnet analysis (confidence: 0.75). No persistent malicious behavior was detected. Threat persistence days were 0, and the IP is not flagged as persistently malicious.
## Related Entities
Three relationship records were identified, all pointing to the same network entity (CNCGROUP-FJ-QUANZHOU-MAN). No additional hostnames, organizations, or certificates were associated with this IP.
## Recommended Actions
No specific firewall rules or security actions were recommended based on the current risk profile. The IP presents a moderate risk level primarily due to its mobile carrier classification and historical DNSBL listings, but no active exploitation indicators were observed.
---
Analysis Date: 2026-07-24
Data Sources: IPDebrief Intelligence Platform
Classification: Standard Intelligence
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | QUAN ZHOU |
| ASN | AS4837 |
| Network Name | CNCGROUP-FJ-QUANZHOU-MAN |
| CIDR Block | 58.23.64.0/19 |
| RIR | APNIC |
| Country | CN |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Mobile |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS4837 |
| Network Prefix | 58.22.0.0/15 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-08 00:51:43 UTC |
| Last Seen | 2026-10-06 10:03:55 UTC |
| Profile Built | 2026-09-13 05:32:51 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 21 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 58.23.78.61
Who owns the IP address 58.23.78.61?
58.23.78.61 is registered to QUAN ZHOU. The address falls within the 58.23.64.0/19 network block. Registration is held at APNIC.
Where is 58.23.78.61 located?
Geolocation data places 58.23.78.61 in Quanzhou, Fujian, China. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 58.23.78.61 malicious or safe?
58.23.78.61 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
Is 58.23.78.61 a VPN, proxy, or data center address?
58.23.78.61 is classified as a mobile network based on network ownership and behavioural analysis.