61.141.112.255📋 Copy

## Intelligence Briefing: IP 61.141.112.255/32

Executive Summary

IP address 61.141.112.255 is a Chinese mobile carrier IP assigned to China Telecom (ASN 4134, IPMASTER CHINANET-GD) with a low-risk profile (risk score: 25). The address shows no active malicious indicators, no open services, and belongs to a subnet classified as "mostly_clean" with low abuse density.

---

Ownership & Network Classification

• ASN: AS4134 (IPMASTER CHINANET-GD)
• Organization: zhongguodianxin
• CIDR Block: 61.141.112.0/24
• Geolocation: China (CN), Guangdong (GD), Shenzhen
• Network Type: Mobile carrier connection (China Telecom, LTE/5G)
• Service Status: Firewalled / No services detected

Threat Indicators

• Risk Score: 25 (Low Risk)
• Blacklist Status: 0 blacklists
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Abuse Confidence Score: Not applicable
• Threat Persistence: 0 days

Network Behavior

• Open Ports: None detected
• HTTP/TLS Services: None
• DNS Resolution: No PTR records, no forward resolution
• Email Authentication: No SPF or DMARC records
• Route Stability: Route changes detected in last 30 days

Neighborhood Analysis (61.141.112.0/24)

• Abuse Density: 0.125 (low)
• Subnet Classification: mostly_clean
• Total Siblings: 8
• Threat Siblings: 1 (61.141.112.209, risk score: 25)
• High Risk Neighbors: 0
• Risk Distribution: 7 low-risk, 0 medium-risk, 0 high-risk

Observation History

14 observations recorded, with recent activity from 2026-07-23. Signals indicate:

• Consistent geolocation attribution to China (Shenzhen region)
• No ownership changes detected
• No persistent malicious activity patterns
• Stable network role classification

Control Plane Data

• BGP Prefix: 61.140.0.0/14
• DNSBL Status: Listed on 1 of 8 DNSBL lists
• Operator Score: 0.1304 (Minimal risk)
• RPKI State: Not validated
• IRR Consistency: Not checked

Recommended Security Actions

No specific firewall rules or blocking recommendations generated. The IP presents a low threat profile consistent with legitimate mobile carrier infrastructure.

Intelligence Assessment

This IP belongs to China Telecom's mobile network infrastructure in Shenzhen. The absence of open services, combined with low risk scoring and minimal neighborhood abuse density, indicates this is a residential/mobile user endpoint rather than a hosting or infrastructure asset. The single threat sibling in the subnet suggests localized activity but does not indicate coordinated malicious behavior.

Recommendation: Monitor for behavioral anomalies but no immediate blocking required. Treat as legitimate mobile traffic unless additional correlation data indicates otherwise.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.