101.34.249.202📋 Copy

# IP Intelligence Briefing: 101.34.249.202/32

## Executive Summary

IP address 101.34.249.202 is a Tencent Cloud infrastructure endpoint located in Shanghai, China (ASN 45090). The IP exhibits moderate risk (score: 60) with no active threat indicators, though it appears on 3 of 8 DNSBLs. No open services are detected, and the IP is firewalled. The subnet classification is "mostly_clean" with minimal inherited risk.

## Technical Profile

Ownership & Network:

• ASN: 45090 (Tencent Cloud administrator)
• Organization: TENCENT-CN
• RIR: APNIC
• BGP Prefix: 101.34.192.0/18

Geolocation:

• Country: China (CN)
• Region/City: Shanghai
• Geo Validation: Plausible (2 sources, consensus confirmed)

Network Role:

• Infrastructure Type: Cloud (Tencent Cloud)
• Service Status: Firewalled / No Services
• CDN: No | Proxy: No | VPN: No | Tor: No

Security Classification:

• Overall Risk Score: 60 (Moderate Risk)
• DNSBL Listed: 3 of 8 lists checked
• Operator Score: 0.1304 (Minimal)
• RPKI State: Unknown
• IRR Consistency: Match

## Threat Indicators

Current Threat Status:

• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (primary profile)
• Abuse Confidence Score: Not available

Historical Signals (24 observations):

• Recent activity detected as of 2026-06-22
• Threat-related signals observed with 75% confidence on 2026-06-22
• Operator labels ranging from "Minimal" across observations
• Geographic signals consistently point to Shanghai region

Campaign Association:

• Campaign Likelihood: None
• Cert Matches: 0
• Correlated IPs: 0

## Neighborhood Analysis

Subnet: 101.34.249.202/24

• Abuse Density: 1
• Classification: Mostly Clean
• Inherited Risk: 2
• Active Siblings: 1
• Threat Siblings: 1

Relationship Graph:

• 10 relationships identified, all mapping to TENCENT-CN network
• Indicates consistent network infrastructure association

## Recommended Actions

1. Monitoring: Continue passive monitoring; no immediate blocking required given cloud infrastructure nature.

2. DNSBL Review: Investigate the 3 DNSBL listings to understand specific reasons for inclusion.

3. Traffic Analysis: If this IP appears in logs, verify it's legitimate Tencent Cloud traffic (expected behavior for cloud infrastructure).

4. Block Decision: Based on moderate risk score and DNSBL presence, consider selective blocking for sensitive services (e.g., internal management interfaces), but allow for legitimate cloud service traffic.

## Intelligence Assessment

This IP represents Tencent Cloud infrastructure with moderate risk scoring primarily driven by DNSBL listings rather than active threat activity. The firewalled status indicates no open services, and the subnet shows mostly clean classification. The IP does not indicate active malicious campaigns or known attacker behavior. Treatment should account for legitimate cloud service traffic while maintaining awareness of DNSBL associations.

---

*Report generated: 2026-06-22*

*Data Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.