107.150.98.185📋 Copy

# IP Intelligence Briefing: 107.150.98.185/32

Classification: Low Risk Infrastructure IP

Date: 2026-07-25

Analyst: IPDebrief Intelligence Team

---

## Executive Summary

IP address 107.150.98.185 is a low-risk infrastructure endpoint belonging to UCLOUD (ASN 135377). The IP shows no direct threat indicators, no malicious activity, and operates as a firewalled service with no open ports detected. Monitoring status: Continue passive observation.

---

## Network Ownership & Location

---

## Risk Assessment

Overall Risk Score: 0 (Low Risk)

Key Metrics:

• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• DNSBL Listed: 0/8 lists

Network Classification: Not classified as cloud, CDN, VPN, proxy, Tor, hosting, mobile, residential, or bogon. Service purpose indicated as "Firewalled / No Services."

---

## Threat Intelligence

Threat Indicators: None detected

• Not a Tor exit node
• Not a known attacker
• Not a spam source
• No known campaign associations
• No threat feed matches

Control Plane Status:

• BGP Prefix: 107.150.96.0/21
• Route Stability: Unstable
• DNSSEC: Valid
• RPKI State: Not determined

---

## Technical Profile

DNS Resolution:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Authentication: No SPF/DMARC records

Services:

• Open Ports: None detected
• TLS Certificates: None
• HTTP Content: None accessible

---

## Observation History

Total Observations: 13 signals

• Most Recent: 2026-07-25
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No

Temporal Analysis: No evidence of escalating threat behavior. The IP has maintained consistent low-risk characteristics throughout observation period.

---

## Network Neighborhood Analysis

Subnet: 107.150.98.185/24

Total Neighbors: 2

Abuse Density: 0

Neighbor Risk Profile:

Note: Two medium-risk neighbors detected in the /24 subnet. This warrants contextual awareness but does not indicate direct threat association with the target IP.

---

## Relationships

Detected Relationships: 4

• All relationships point to same network: ZL-LAX-UCLOUD-0038

No cross-network or organizational relationships detected beyond the assigned UCLOUD network block.

---

## Security Recommendations

Immediate Actions: None required

Monitoring Strategy:

• Maintain passive observation on the IP address
• Monitor neighborhood IPs (107.150.98.86, 107.150.98.168) for potential lateral threat activity
• No firewall rules recommended for this IP at current risk level
• Continue to track UCLOUD network for broader threat intelligence

---

## Conclusion

IP 107.150.98.185 represents a low-risk cloud infrastructure endpoint with no malicious indicators. The absence of open services, combined with zero blacklist entries and no observed threat activity, supports classification as benign infrastructure. However, the presence of medium-risk neighbors in the immediate /24 subnet suggests this network block may warrant periodic reassessment.

Status: No action required. Continue passive monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.