106.63.26.27📋 Copy

## Intelligence Briefing: 106.63.26.27/32

Date: 2026-07-26

Classification: Low Risk

Status: Active Monitoring

Executive Summary

IP address 106.63.26.27 presents a low-risk threat profile with an overall risk score of 25. The address is associated with CT-CLOUDYCOMPANY (AS141679) within the 106.63.0.0/17 CIDR block under APNIC registration. No active malicious indicators detected; the IP is classified as clean with no known campaigns or persistent threat behavior.

Technical Profile

Ownership & Registration:

• ASN: 141679
• Organization: zhiyong liu
• Netname: CT-CLOUDYCOMPANY
• RIR: APNIC
• CIDR Block: 106.63.0.0/17

Geolocation:

• Country: CN (China)
• Geo Validation: ICMP blocked - unable to validate
• Distance: 8033.2 km from probe origin
• Geo Consensus: True (plausible)

Network Role Classification:

• Firewalled / No Services detected
• Not classified as CDN, proxy, VPN, hosting, mobile, or cloud infrastructure
• Not identified as Tor exit node or known attacker

DNS & Services:

• No PTR hostnames resolved
• No forward DNS resolution confirmed
• Zero open ports detected
• No TLS certificates or HTTP banners observed

Threat Indicators:

• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• DNSBL Listed: 1 of 8 total lists
• Known Campaigns: None
• Threat Feeds: Empty

Neighborhood Analysis (106.63.26.0/24)

Subnet Statistics:

• Abuse Density: 0 (clean)
• Total Siblings: 7
• Active Siblings: 1
• Threat Siblings: 0

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 3

Notable Neighbors:

• 106.63.26.13: Risk Score 0
• 106.63.26.15: Risk Score 25
• Remaining neighbors (106.63.26.14, 106.63.26.131, 106.63.26.132, 106.63.26.156): Null risk scores

Observation History (18 Signals)

Recent monitoring activity indicates stable behavior with no escalation in threat indicators. Key historical signals include:

• Subnet classification consistently "clean" with inherited risk of 0
• No ownership changes detected
• No threat persistence patterns observed
• Geo validation challenges (ICMP blocked)
• No campaign likelihood or correlated IPs

Relationship Graph

All five detected relationships map to "Same Network" entries for CT-CLOUDYCOMPANY. No external relationships to organizations, hostnames, domains, or certificates identified.

Recommended Actions

Based on the low-risk profile and absence of active threat indicators, no immediate blocking or mitigation actions are required. The IP demonstrates:

• Low risk score (25)
• Clean subnet classification (0 abuse density)
• No blacklist presence
• No active malicious campaigns

Monitoring Recommendation: Continue standard observation. No firewall rules recommended at this time.

---

*Data source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.