106.75.189.197📋 Copy

IP Intelligence Briefing: 106.75.189.197

Date: 2026-06-05

---

**1. Core Profile**

• Risk Score: 40 (Moderate Risk)
• Ownership: Registered to Jinhui Jia (ASN 58466, APNIC).
• Geolocation: China (CN), inferred with 2500km accuracy radius.
• Threat Indicators: No active malicious campaigns, no known attackers, no spam sources.
• Network Role: Firewalled / No Services (no open ports, no TLS/HTTP services detected).

---

**2. Observation History**

• DNSBL Listings: 2 out of 8 lists (moderate confidence).
• Geolocation Consensus: Inferred as China (35.86°N, 104.2°E).
• Network Stability: Route stability score 0.13 (Minimal), no recent ownership changes.
• Behavioral Signals: No honeypot hits, enumeration strikes, or WAF violations.

---

**3. Relationships**

• Network Affiliation: Linked to UCLOUD-NET (APNIC, ASN 58466).
• Certificates/Hostnames: No TLS certificates or PTR hostnames detected.
• Email Reputation: No SPF/DKIM records found.

---

**4. Neighborhood Analysis**

• Subnet: 106.75.189.197/24.
• Abuse Density: 0% (clean subnet).
• Neighbors: No active or threat siblings in the subnet.

---

**5. Threat Assessment**

• Current Risk: Moderate (DNSBL mentions but no active malicious activity).
• Recommendations:

- Monitor for new DNSBL listings or service activation.

- Validate geolocation with additional probes if suspicious activity emerges.

- No immediate mitigation required, but maintain visibility.

---

Source: IPDebrief Threat Intelligence Platform

Note: This IP is associated with a legitimate Chinese ISP (UCLOUD-NET). While DNSBL listings suggest potential spam/abuse, no active threats were detected. SOC teams should prioritize monitoring for behavioral changes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.