101.36.104.239
## IP Intelligence Briefing: 101.36.104.239/32
Classification: High Risk (Score: 80)
Ownership & Infrastructure:
The target IP belongs to UCLOUD INFORMATION TECHNOLOGY HK LIMITED (UCLOUD-JP), ASN 135377, under the APNIC RIR registration. The IP is allocated from CIDR block 101.36.104.0/23. Network classification indicates no active services; the IP is firewalled with no open ports, TLS certificates, or HTTP headers. DNS resolution failed forward resolution with no PTR records.
Geolocation:
Geolocation signals consistently place the IP in Tokyo, Japan (latitude: 36.2, longitude: 138.25), though confidence varies. Multiple geolocation sources confirm the country code JP.
Threat Indicators:
The IP is listed on 5 out of 8 DNSBL entries. No known attacker indicators, Tor exit node status, or spam source classification. No threat indicators or campaigns detected. However, the High Risk classification and DNSBL listings warrant defensive measures.
Network Environment:
The /24 subnet (101.36.104.0/24) shows 1 sibling IP (101.36.104.242) also flagged as High Risk (score: 80) with authority score 50. Subnet abuse density is 1, indicating elevated risk within the neighborhood.
Temporal Analysis:
Observation history from July 30, 2026 shows 10 total signal observations with mixed confidence levels (0.17–0.90). Ownership signals confirm UCLOUD attribution. No persistent malicious behavior detected; threat persistence days: 0.
Recommended Actions:
- Block inbound connections at perimeter firewall for 101.36.104.239/32
- Consider blocking the entire /24 subnet (101.36.104.0/24) due to high-risk sibling presence
- Monitor for lateral activity from related IP 101.36.104.242
- Review DNSBL listings for context on specific threat vectors
Risk Summary:
High-risk cloud infrastructure IP with no active services but significant DNSBL presence. The subnet environment shows elevated abuse density. Defensive blocking recommended despite lack of active threat indicators, based on reputation scores and neighborhood risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | UCLOUD INFORMATION TECHNOLOGY HK LIMITED |
| ASN | AS135377 |
| Network Name | UCLOUD-JP |
| CIDR Block | 101.36.104.0/23 |
| RIR | APNIC |
| Country | JP |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 16% | 4 | 5 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-27 09:38:30 UTC |
| Last Seen | 2026-08-13 06:43:15 UTC |
| Profile Built | 2026-07-30 11:03:25 UTC |
| Data Freshness | Live |
| Signal Types | 12 |
| Total Observations | 12 |
Full dossier details are available via our API.