152.32.240.77📋 Copy

# IP Intelligence Briefing: 152.32.240.77

## Executive Summary

IP 152.32.240.77 is a low-risk infrastructure address in Hong Kong operated by UCLOUD INFORMATION TECHNOLOGY HK LIMITED. While the IP itself shows no active services and no direct threat indicators, the /24 subnet exhibits elevated neighbor activity with three medium-risk and two low-risk IPs. Recent blacklist listings require monitoring.

## Ownership and Registration

• Organization: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
• Network: UCLOUD-HK (152.32.240.0/24)
• ASN: 135377 (UCLOUD-HK-AS-AP)
• Location: Hong Kong, China (Asia/Hong_Kong timezone)
• RIR: ARIN
• Allocation: 1992-01-10
• Network Role: Firewalled / No Services

## Current Risk Profile

• Risk Score: 0 / 100 (Low Risk)
• Provider Score: 0
• Authority Score: 0
• Abuse Confidence Score: Not available
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (current snapshot)
• Open Ports: None detected
• Services: No open services or TLS certificates

## Recent Observations (Last 24 Hours)

• DNSSEC Valid: Yes
• PTR Records: None
• Listings: 8 total lists, 3 with listed status, maximum severity: High
• Observations Count: 10 signals
• Recent Activity: 2026-07-29T16:04:22

## Neighborhood Analysis (152.32.240.0/24)

• Subnet Abuse Density: 0
• Total Neighbor IPs: 5
• Risk Distribution: 0 High, 3 Medium, 2 Low
• Neighbor Risk Scores:

- 152.32.240.13: Risk 25, Authority 50

- 152.32.240.86: Risk 25, Authority 50

- 152.32.240.95: Risk 40, Authority 50

- 152.32.240.167: Risk 50, Authority 50

- 152.32.240.183: Risk 50, Authority 50

## Relationships

• Connected Network: UCLOUD-HK
• Direct Threat Links: None

## Recommended Actions

No specific firewall rules or blocking recommendations. The IP maintains a low-risk profile with no active services. However, the subnet's elevated neighbor activity suggests monitoring the /24 block is advisable.

## Threat Indicators

• Known Campaigns: None
• Threat Feeds: None
• Cert Matches: 0
• Correlated IPs: 0

## Assessment

This IP represents cloud infrastructure with no currently exposed services. The high-severity blacklist listings observed in recent history warrant continued monitoring, though no active exploitation or malicious activity is evident against this specific address. The subnet shows moderate risk concentration among neighbors, particularly at 152.32.240.167 and 152.32.240.183 (risk score 50). SOC teams should maintain watch on the /24 prefix and correlate with any threat intelligence regarding UCLOUD infrastructure.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.