# 117.50.130.195 — IP Intelligence Summary

117.50.130.195 is an IPv4 address operated by Jinhui Jia (AS23724), geolocated to China. As of November 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/117.50.130.195
- Last updated: 2026-11-06

## Ownership

- Organization: Jinhui Jia
- Network name: UCLOUD-NET
- Allocated block: 117.50.0.0/16
- ASN: AS23724 (https://ipdebrief.com/asn/23724)
- Regional registry: APNIC

## Location

- City: —
- Region: —
- Country: China
- Time zone: —

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 117.50.130.195/32

\## Executive Summary

IP 117.50.130.195 presents a low-risk profile (risk score: 25) with minimal observed threat indicators. The address is geolocated to China (CN) with moderate confidence and is listed on one of eight DNSBLs. No active services are detected, and the subnet exhibits low abuse density.

\## Technical Profile

\- **Risk Score:** 25 (Low Risk)

\- **ASN:** 23724

\- **BGP Prefix:** 117.50.128.0/19

\- **Geolocation:** China (35.86°N, 104.2°E) – confidence: 0.35

\- **DNS Resolution:** PTR hostnames unresolved; forward DNS confirmed false

\- **Service Status:** Firewalled / No Services detected (no open ports, TLS certificates, or HTTP responses)

\- **DNSSEC:** Valid (confidence: 0.90)

\- **Reputation:** Low Risk

\## Threat Indicators

\- **Abuse Confidence Score:** Not populated

\- **Blacklist Status:** Listed on 1 of 8 DNSBLs (max severity: high)

\- **Known Attacker:** False

\- **Spam Source:** False

\- **Tor Exit Node:** False

\- **Known Campaigns:** None identified

\- **Behavioral Signals:** 0 honeypot hits, 0 enumeration strikes, 0 WAF violations

\## Observation History

Seven observations recorded through 28 July 2026. Key signals include:

\- Geolocation consistently reported as CN with low confidence (0.35)

\- DNSSEC validation confirmed across observations

\- Blacklist presence detected with high severity rating (confidence: 0.85)

\- No persistent malicious behavior observed

\## Subnet Analysis (117.50.130.0/24)

\- **Total Neighbors:** 31

\- **Abuse Density:** 0

\- **Risk Distribution:** 0 high-risk, 0 medium-risk, 30 low-risk

\- **Notable Neighbors:** Multiple IPs (117.50.130.60, 130.79, 130.82, 130.92, 130.105, 130.128, 130.148, 130.156, 130.159, 130.161, 130.182, 130.185, 130.186, 130.197, 130.208, 130.213, 130.229, 130.233, 130.250) share risk score 25 with authority score 50

\- **Relationship Graph:** No connected entities identified

\## Recommended Actions

No specific firewall or mitigation rules generated. The IP's low risk score and lack of active services suggest standard monitoring protocols are sufficient.

\## Intelligence Assessment

This IP address operates within a residential or infrastructure subnet with minimal threat activity. The single DNSBL listing warrants continued monitoring but does not indicate active malicious behavior. The absence of open services and low-risk neighborhood context supports a low-priority classification. No immediate blocking or escalation required; maintain standard logging and observation practices.

## Nearby addresses

- 117.50.130.6 (https://ipdebrief.com/117.50.130.6)
- 117.50.130.60 (https://ipdebrief.com/117.50.130.60)
- 117.50.130.61 (https://ipdebrief.com/117.50.130.61)
- 117.50.130.79 (https://ipdebrief.com/117.50.130.79)
- 117.50.130.82 (https://ipdebrief.com/117.50.130.82)
- 117.50.130.83 (https://ipdebrief.com/117.50.130.83)
- 117.50.130.92 (https://ipdebrief.com/117.50.130.92)
- 117.50.130.94 (https://ipdebrief.com/117.50.130.94)
- 117.50.130.98 (https://ipdebrief.com/117.50.130.98)
- 117.50.130.105 (https://ipdebrief.com/117.50.130.105)
- 117.50.130.109 (https://ipdebrief.com/117.50.130.109)
- 117.50.130.125 (https://ipdebrief.com/117.50.130.125)

---

Source: IPDebrief, "117.50.130.195 IP intelligence", https://ipdebrief.com/117.50.130.195, updated 2026-11-06. Assessments are probabilistic.