101.36.107.222📋 Copy

# IP Intelligence Briefing: 101.36.107.222/32

Classification: Low Risk | Last Updated: 2026-07-17

Analyst: IPDebrief SOC Intelligence

---

## Executive Summary

IP address 101.36.107.222 is a cloud infrastructure endpoint registered to UCLOUD INFORMATION TECHNOLOGY HK LIMITED. The IP demonstrates a clean security profile with no active threat indicators, no open services, and no association with known malicious campaigns. The address is firewalled with no exposed services detected across multiple observation cycles.

---

## Ownership & Network Context

• Organization: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
• ASN: AS135377 (UCLOUD-HK)
• CIDR Block: 101.36.106.0/23
• Geolocation: Hong Kong (22.4°N, 114.11°E)
• RIR: APNIC
• Network Classification: Cloud Infrastructure

The IP belongs to the UCLOUD-HK network infrastructure block, classified as cloud hosting infrastructure with no residential or mobile carrier attribution.

---

## Risk Profile Assessment

Key Risk Indicators:

• Risk Score: 0 (no detected malicious activity)
• No known campaigns or attacker associations
• Not listed on major threat feeds
• Zero blacklist entries

---

## Service Exposure Analysis

Open Ports: None detected

TLS Certificate: Not configured

HTTP Title: No content served

Server Banner: None

The IP address presents a minimal service attack surface with no open ports and no active web services. The system is configured in a firewalled state with no externally accessible services.

---

## Threat Intelligence Findings

Threat Indicators: None

Known Campaigns: None

Blacklist Count: 0

Tor Exit Node: No

Known Attacker: No

Spam Source: No

No threat indicators or malicious activity signatures were observed across all scanned threat feeds. The IP does not exhibit characteristics of proxy, VPN, or Tor infrastructure.

---

## Network Neighborhood Analysis

Subnet: 101.36.107.222/24

Abuse Density: 0 (Clean)

Total Siblings: 3

Active Siblings: 1

Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 1 (101.36.107.233 - Risk Score: 50)
• Low Risk: 0

The immediate /24 neighborhood shows minimal threat activity. One neighboring IP (101.36.107.233) carries a medium-risk score of 50, warranting periodic monitoring. The target IP itself shows no inherited risk from adjacent addresses.

---

## Historical Signal Analysis

Observation Count: 16 signals tracked

Observation Window: Recent 48-hour period

Signal Timeline Highlights:

• 2026-07-17 21:49:34 UTC - Network role classification (Cloud: false)
• 2026-07-17 21:48:47 UTC - Subnet abuse density check (Clean)
• 2026-07-17 21:46:55 UTC - Ownership stability assessment (No changes)
• 2026-07-17 21:44:53 UTC - Geolocation inference (Hong Kong, 52% confidence)
• 2026-07-17 21:44:37 UTC - Threat pulse check (10 pulses detected in subnet)

Historical signals indicate consistent low-risk behavior with no escalation in threat activity. Ownership stability shows zero changes, and threat persistence metrics remain at zero days.

---

## Control Plane Data

• BGP Prefix: 101.36.107.0/24
• Route Stability: False
• DNSSEC Valid: Yes
• DNSBL Listed: 0 (of 8 total lists)
• RPKI State: Not evaluated
• IRR Consistency: Not evaluated

---

## Recommended Security Actions

Firewall/IPS Recommendations: No action required

WAF Configuration: No rules necessary

Monitoring Priority: Low

Given the clean risk profile and lack of service exposure, standard network-level filtering is appropriate. No specific block, allow, or rate-limit rules are recommended for this address.

---

## Conclusion

IP 101.36.107.222 is a benign cloud infrastructure endpoint from UCLOUD-HK with no detected malicious activity. The address presents minimal security risk and does not require immediate defensive action. Periodic inclusion in routine network monitoring is sufficient.

Confidence Level: High

Next Review: 30 days or upon threat intelligence updates

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.