128.1.132.84📋 Copy

# IP Intelligence Briefing: 128.1.132.84/32

Date: 2026-07-30

Classification: Low Risk

Risk Score: 25/100

## Executive Summary

IP address 128.1.132.84 belongs to UCLOUD (ASN 135377), registered under the network block ZL-HKG-UCLOUD-0041. The IP exhibits low-risk characteristics with no active threat indicators. The address is classified as firewalled with no services exposed.

## Ownership and Infrastructure

The IP is owned by UCLOUD (unoc@ucloud.cn) under RIR ARIN. Network registration shows CIDR block 128.1.132.0/24. Control plane analysis indicates BGP prefix 128.1.132.0/24 with origin ASN 135377. Route stability is marked as false, with zero route changes observed in the past 30 days.

## Geolocation Analysis

Geographic data presents conflicting indicators. The primary profile indicates United States (Central region), while historical observations from AlienVault OTX show Hong Kong (HCW region, coordinates 22.2908, 114.1501). GeoPlausible validation failed. Traceroute analysis recorded 25 hops with 11 timed-out hops, with Comcast appearing in transit networks.

## Threat Intelligence

Threat assessment returned no active indicators:

• Not a Tor exit node
• Not classified as known attacker
• Not identified as spam source
• Zero blacklist hits from major threat feeds
• No associated known campaigns

One DNSBL listing was identified out of 8 total lists checked.

## Network Activity and Services

Network reconnaissance revealed no open ports and no TLS certificates. The IP is classified as "Firewalled / No Services." No email authentication records (SPF, DMARC) were detected.

## Neighborhood Analysis

The /24 subnet 128.1.132.0/24 contains 256 potential IPv4 addresses. Two neighboring IPs were identified:

• 128.1.132.17: Risk Score 40, Authority Score 50
• 128.1.132.136: Risk Score 40, Authority Score 50

Subnet abuse density registers at 0. No high-risk neighbors were observed.

## Historical Observations

Signal history contains 13 observations. Recent signals (2026-07-30) indicate:

• Network ownership attribution to UCLOUD with confidence 0.95
• Geographic attribution to Hong Kong with confidence 0.95
• Traceroute observations with 25 hops
• Network type classification showing no CDN, proxy, or VPN characteristics

## Recommended Actions

No automated firewall rules or security actions were generated due to the low-risk profile (score 25). The IP is not currently flagged for blocking.

## Intelligence Notes

The IP presents a typical cloud infrastructure profile with no observable malicious activity. Geographic discrepancies between profile data and historical feeds warrant monitoring but do not currently indicate compromise. The presence of two higher-risk neighbors (score 40) in the same /24 subnet suggests some localized abuse activity, though this IP remains below threshold for action.

Status: Monitor – No immediate action required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.