117.50.130.244📋 Copy

# IP INTELLIGENCE BRIEFING

Target IP: 117.50.130.244/32

Analysis Date: 2026-07-22

Classification: Low Risk / No Immediate Action Required

---

## EXECUTIVE SUMMARY

IP address 117.50.130.244 presents a low-risk profile with no active threat indicators. The address is associated with UCLOUD-NET (AS23724) within the 117.50.0.0/16 CIDR block registered under APNIC in China. The IP shows no malicious activity, is not blacklisted, and maintains a risk score of 0. No immediate defensive actions are recommended, though contextual subnet analysis warrants continued monitoring.

---

## OWNERSHIP & NETWORK CLASSIFICATION

Organization: Jinhui Jia

ASN: 23724

Network Name: UCLOUD-NET

CIDR Block: 117.50.0.0/16

Geolocation: China (CN)

RIR: APNIC

Network Role: Firewalled / No Services

Classification: Not CDN, not Cloud, not Hosting, not Mobile, not Residential, not Proxy, not Tor

---

## THREAT PROFILE

Risk Score: 0

Abuse Confidence Score: N/A

Blacklist Count: 0

Reputation: Low Risk

Threat Indicators: None detected

• Not known attacker
• Not Tor exit node
• Not spam source
• No associated threat campaigns
• No threat persistence observed

Behavioral Signals:

• Honeypot hits: 0
• Enumeration strikes: 0
• WAF violations: 0
• Total incidents: 0
• Auto-banned: No

---

## OBSERVATION HISTORY

Total Observations: 14

Time Period: 2026-07-22

Threat Persistence Days: 0

Ownership Changes: 0

Key Observations:

• Geolocation consistently reported as China (CN) with multi-signal inference
• Network classification stable across observations
• Operator score: Minimal (0.1304)
• No persistent malicious activity detected
• Low confidence values across signals (0.25-0.85) indicating limited observable data

---

## SUBNET ANALYSIS

Subnet: 117.50.130.0/24

Total Neighbor IPs: 31

Abuse Density: 0

Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 26

Notable Neighbors with Risk Scores:

• 117.50.130.60, .79, .82, .83, .92, .98, .105, .109, .128, .134, .138, .148, .156, .159, .161, .182, .185, .186, .197, .208, .213, .218, .228, .229, .233, .250 — Risk Score: 25, Authority Score: 50
• Several IPs show null risk scores

The subnet demonstrates minimal abuse density with mixed risk profiles among neighbors. No systemic compromise pattern detected.

---

## RELATIONSHIP GRAPH

Related Entities: 3

• All relationships classified as "Same Network" → UCLOUD-NET
• No associated hostnames, organizations, or certificates identified
• No certificate matches or correlated IPs found

---

## TECHNICAL DETAILS

DNS:

• PTR Hostnames: None
• Forward Resolution: Not confirmed
• Hosted Domains: 0
• Email Auth (SPF/DMARC): N/A

Services:

• Open Ports: None detected
• TLS Certificates: None
• HTTP Services: None

Control Plane:

• BGP Prefix: 117.50.128.0/19
• Route Stability: False
• RPKI State: Not available
• DNSSEC Valid: Yes

---

## RECOMMENDED ACTIONS

Risk Score: 0

Recommended Actions: None

Firewall Rules: Not required

Decision Rationale: The IP shows no active threat indicators, maintains low-risk classification, and exhibits no malicious behavioral patterns. Standard traffic monitoring is sufficient. No blocking or rate-limiting rules are warranted at this time.

---

## ANALYST NOTES

While this individual IP presents minimal risk, analysts should note that several neighbors within the same /24 subnet demonstrate medium-risk profiles (Risk Score: 25). Continued contextual monitoring of the broader 117.50.130.0/24 subnet is advised to detect potential lateral activity or emerging threat patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.