# 117.50.130.244 — IP Intelligence Summary 117.50.130.244 is an IPv4 address operated by Jinhui Jia (AS4808), geolocated to China. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/117.50.130.244 - Last updated: 2026-10-07 ## Ownership - Organization: Jinhui Jia - Network name: UCLOUD-NET - Allocated block: 117.50.0.0/16 - ASN: AS4808 (https://ipdebrief.com/asn/4808) - Regional registry: APNIC ## Location - City: — - Region: — - Country: China - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP INTELLIGENCE BRIEFING **Target IP:** 117.50.130.244/32 **Analysis Date:** 2026-07-22 **Classification:** Low Risk / No Immediate Action Required \--- \## EXECUTIVE SUMMARY IP address 117.50.130.244 presents a low-risk profile with no active threat indicators. The address is associated with UCLOUD-NET (AS23724) within the 117.50.0.0/16 CIDR block registered under APNIC in China. The IP shows no malicious activity, is not blacklisted, and maintains a risk score of 0. No immediate defensive actions are recommended, though contextual subnet analysis warrants continued monitoring. \--- \## OWNERSHIP & NETWORK CLASSIFICATION **Organization:** Jinhui Jia **ASN:** 23724 **Network Name:** UCLOUD-NET **CIDR Block:** 117.50.0.0/16 **Geolocation:** China (CN) **RIR:** APNIC **Network Role:** Firewalled / No Services **Classification:** Not CDN, not Cloud, not Hosting, not Mobile, not Residential, not Proxy, not Tor \--- \## THREAT PROFILE **Risk Score:** 0 **Abuse Confidence Score:** N/A **Blacklist Count:** 0 **Reputation:** Low Risk **Threat Indicators:** None detected \- Not known attacker \- Not Tor exit node \- Not spam source \- No associated threat campaigns \- No threat persistence observed **Behavioral Signals:** \- Honeypot hits: 0 \- Enumeration strikes: 0 \- WAF violations: 0 \- Total incidents: 0 \- Auto-banned: No \--- \## OBSERVATION HISTORY **Total Observations:** 14 **Time Period:** 2026-07-22 **Threat Persistence Days:** 0 **Ownership Changes:** 0 **Key Observations:** \- Geolocation consistently reported as China (CN) with multi-signal inference \- Network classification stable across observations \- Operator score: Minimal (0.1304) \- No persistent malicious activity detected \- Low confidence values across signals (0.25-0.85) indicating limited observable data \--- \## SUBNET ANALYSIS **Subnet:** 117.50.130.0/24 **Total Neighbor IPs:** 31 **Abuse Density:** 0 **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 0 \- Low Risk: 26 **Notable Neighbors with Risk Scores:** \- 117.50.130.60, .79, .82, .83, .92, .98, .105, .109, .128, .134, .138, .148, .156, .159, .161, .182, .185, .186, .197, .208, .213, .218, .228, .229, .233, .250 — Risk Score: 25, Authority Score: 50 \- Several IPs show null risk scores The subnet demonstrates minimal abuse density with mixed risk profiles among neighbors. No systemic compromise pattern detected. \--- \## RELATIONSHIP GRAPH **Related Entities:** 3 \- All relationships classified as "Same Network" → UCLOUD-NET \- No associated hostnames, organizations, or certificates identified \- No certificate matches or correlated IPs found \--- \## TECHNICAL DETAILS **DNS:** \- PTR Hostnames: None \- Forward Resolution: Not confirmed \- Hosted Domains: 0 \- Email Auth (SPF/DMARC): N/A **Services:** \- Open Ports: None detected \- TLS Certificates: None \- HTTP Services: None **Control Plane:** \- BGP Prefix: 117.50.128.0/19 \- Route Stability: False \- RPKI State: Not available \- DNSSEC Valid: Yes \--- \## RECOMMENDED ACTIONS **Risk Score:** 0 **Recommended Actions:** None **Firewall Rules:** Not required **Decision Rationale:** The IP shows no active threat indicators, maintains low-risk classification, and exhibits no malicious behavioral patterns. Standard traffic monitoring is sufficient. No blocking or rate-limiting rules are warranted at this time. \--- \## ANALYST NOTES While this individual IP presents minimal risk, analysts should note that several neighbors within the same /24 subnet demonstrate medium-risk profiles (Risk Score: 25). Continued contextual monitoring of the broader 117.50.130.0/24 subnet is advised to detect potential lateral activity or emerging threat patterns. ## Nearby addresses - 117.50.130.6 (https://ipdebrief.com/117.50.130.6) - 117.50.130.60 (https://ipdebrief.com/117.50.130.60) - 117.50.130.61 (https://ipdebrief.com/117.50.130.61) - 117.50.130.79 (https://ipdebrief.com/117.50.130.79) - 117.50.130.82 (https://ipdebrief.com/117.50.130.82) - 117.50.130.83 (https://ipdebrief.com/117.50.130.83) - 117.50.130.92 (https://ipdebrief.com/117.50.130.92) - 117.50.130.94 (https://ipdebrief.com/117.50.130.94) - 117.50.130.98 (https://ipdebrief.com/117.50.130.98) - 117.50.130.105 (https://ipdebrief.com/117.50.130.105) - 117.50.130.109 (https://ipdebrief.com/117.50.130.109) - 117.50.130.125 (https://ipdebrief.com/117.50.130.125) --- Source: IPDebrief, "117.50.130.244 IP intelligence", https://ipdebrief.com/117.50.130.244, updated 2026-10-07. Assessments are probabilistic.