59.39.211.92📋 Copy

# IP Intelligence Briefing: 59.39.211.92

## Executive Summary

IP 59.39.211.92 is a low-risk residential/mobile endpoint assigned to China Telecom's CHINANET-GD network. The IP shows no active threat indicators and is currently classified as "Low Risk" with a risk score of 25. No malicious activity or campaign associations were observed.

## Network Classification & Ownership

• ASN: 4134 (China Telecom)
• Organization: IPMASTER CHINANET-GD
• CIDR Block: 59.42.0.0/16
• Network Name: CHINANET-GD
• Geolocation: China (CN) — geolocation consensus confirmed
• Connection Type: Mobile (China Telecom LTE/5G, MCC 460, MNC 03)
• BGP Prefix: 59.32.0.0/13

## Risk Profile

• Overall Risk Score: 25 (Low Risk)
• Reputation: Low Risk
• Abuse Confidence: Not applicable
• DNSBL Status: Listed on 1 of 8 threat feeds
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No

## Network State & Services

• Open Ports: None detected
• Service Status: Firewalled / No Services
• TLS Certificate: None
• HTTP Title: None
• PTR Hostnames: None
• Forward Resolution: Unresolved

## Historical Observations (21 signals)

Analysis of the IP's observation history reveals stable, benign behavior over the monitoring period:

• Most Recent Signal: 2026-06-23 — Minimal threat operator score (0)
• Geolocation Consistency: China (CN) maintained across all observations
• Subnet Classification: "mostly_clean" with abuse density of 1 (observed 2026-06-18)
• Threat Persistence: 0 days (not persistently malicious)
• Campaign Likelihood: None

## Neighborhood Analysis (59.39.211.0/24)

• Total Siblings: 1
• Active Siblings: 1
• Threat Siblings: 1
• Abuse Density: 0
• Risk Distribution: No high or medium risk neighbors
• Inherited Risk: 2

## Relationships Graph

• Network Associations: 18 relationships mapped to CHINANET-GD network
• Organization Links: Consistent with China Telecom infrastructure
• External Entities: No certificates, hostnames, or correlated IPs detected

## Recommended Actions

No immediate blocking or mitigation actions required. The IP demonstrates characteristics of a legitimate mobile endpoint with no evidence of malicious activity. Continue standard monitoring.

---

*Intelligence generated via IPDebrief. Data accuracy and recency subject to real-time updates.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.