# 61.141.112.254 — IP Intelligence Summary 61.141.112.254 is an IPv4 address operated by IPMASTER CHINANET-GD (AS4134), geolocated to Zhuhai, China. It belongs to a mobile network. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/61.141.112.254 - Last updated: 2026-10-06 ## Ownership - Organization: IPMASTER CHINANET-GD - Network name: zhongguodianxin - Allocated block: 61.141.112.0/24 - ASN: AS4134 (https://ipdebrief.com/asn/4134) - Regional registry: APNIC ## Location - City: Zhuhai - Region: Guangdong - Country: China - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: yes - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP INTELLIGENCE BRIEFING: 61.141.112.254/32 **Classification:** Low Risk / Mobile Carrier Infrastructure **Date:** Intelligence current as of observation data **Analyst Priority:** Standard Monitoring \--- \## EXECUTIVE SUMMARY IP address 61.141.112.254 is classified as a mobile carrier infrastructure endpoint operating on China Telecom's network infrastructure. The IP demonstrates minimal threat characteristics with a risk score of 0.0. No active threat indicators, blacklist associations, or known attack campaigns were identified. The address represents legitimate mobile network infrastructure with no evidence of malicious activity. \--- \## NETWORK OWNERSHIP & GEOLOCATION \- **Organization:** zhongguodianxin (IPMASTER CHINANET-GD) \- **ASN:** AS4134 (China Telecom/China Netcom) \- **Country:** China (CN) \- **City/Region:** Shenzhen, Guangdong (GD) \- **Provider Type:** Mobile Carrier (China Telecom Corp. Ltd.) \- **Connection Technology:** LTE/5G Mobile Network \- **CIDR Block:** 61.141.112.0/24 \- **RIR:** APNIC \- **Registration:** APNIC-regulated infrastructure \--- \## THREAT ASSESSMENT | Metric | Value | Assessment | |--------|-------|------------| | Risk Score | 0.0 | Low Risk | | Provider Score | 0.0 | Normal | | Authority Score | 0.0 | Normal | | Abuse Confidence | N/A | Not Applicable | | Threat Indicators | None | Clean | | Blacklist Count | 0 | Clean | | Known Campaigns | None | Clean | | Tor Exit Node | No | Clean | | Spam Source | No | Clean | | Known Attacker | No | Clean | **Threat Signals:** No threat indicators detected across all monitored feeds. No associations with known malicious campaigns, attack infrastructure, or abuse reporting sources. \--- \## NETWORK SERVICES & EXPOSURE \- **Open Ports:** None detected \- **HTTP Services:** None \- **TLS Certificates:** None \- **DNS Records:** No PTR hostnames; no forward resolution records \- **Email Authentication:** N/A (no email hosting) \- **Network Role:** Firewalled / No Services Exposed \- **Infrastructure Classification:** Mobile Carrier Endpoint \--- \## NEIGHBORHOOD ANALYSIS (61.141.112.0/24) **Subnet Classification:** mostly_clean **Abuse Density:** 0.125 (12.5% - Low-Moderate) **Inherited Risk:** 2 (Low) **Total Siblings:** 8 **Active Siblings:** 0 **Threat Siblings:** 1 **Neighbor Risk Distribution:** \- High Risk: 0 \- Medium Risk: 0 \- Low Risk: 7 \- Inherited Risk Score: 2 **Notable Neighbors:** \- 61.141.112.252: Risk Score 30 (elevated but within normal carrier variance) \- 61.141.112.253: Risk Score 0 \- 61.141.112.39: Risk Score 0 The /24 subnet demonstrates low overall threat presence with predominantly clean mobile infrastructure endpoints. \--- \## OBSERVATION HISTORY **Total Observations:** 14 signals logged **Recent Activity:** Multiple observations on 2026-07-23 **Ownership Changes:** 0 **Threat Persistence:** 0 days **Persistently Malicious:** No **Key Historical Signals:** \- Geo-location inference from multi-signal sources (confidence 0.52) \- Alienvault-OTX association with threat reputation (confidence 0.75) \- Subnet classification consistent with mobile carrier infrastructure \- No escalation in threat indicators over observation period **Temporal Analysis:** IP shows stable characteristics with no evidence of behavioral changes indicating compromise or abuse escalation. \--- \## RELATIONSHIP GRAPH **Identified Relationships:** \- Same Network: zhongguodianxin (multiple entries) No external associations detected with: \- Hostnames \- Organizations (beyond network owner) \- Certificates \- Correlated malicious IPs \--- \## SECURITY ACTIONS & RECOMMENDATIONS **Current Risk Level:** 0.0 **Recommended Actions:** None required **Firewall Rules:** Not applicable **Assessment:** This IP address represents legitimate mobile carrier infrastructure. No blocking or rate-limiting actions are recommended at this time. The address is properly classified as mobile carrier infrastructure with no exposure to direct service scanning or attack surface. \--- \## INTELLIGENCE JUDGMENT **61.141.112.254** is a legitimate China Telecom mobile carrier endpoint in Shenzhen. The IP exhibits all characteristics expected of mobile network infrastructure: no open services, mobile carrier classification, and standard risk parameters for telecom infrastructure. The single threat sibling in the /24 subnet does not impact this specific IP's classification. **SOC Action Required:** None. Continue standard monitoring. No escalation recommended. \--- **End of Briefing** ## Nearby addresses - 61.141.112.39 (https://ipdebrief.com/61.141.112.39) - 61.141.112.113 (https://ipdebrief.com/61.141.112.113) - 61.141.112.209 (https://ipdebrief.com/61.141.112.209) - 61.141.112.250 (https://ipdebrief.com/61.141.112.250) - 61.141.112.252 (https://ipdebrief.com/61.141.112.252) - 61.141.112.253 (https://ipdebrief.com/61.141.112.253) - 61.141.112.255 (https://ipdebrief.com/61.141.112.255) --- Source: IPDebrief, "61.141.112.254 IP intelligence", https://ipdebrief.com/61.141.112.254, updated 2026-10-06. Assessments are probabilistic.