IP Intelligence Briefing: 152.32.251.44/32
*Generated via IPDebrief tools: profile, history, relationships, and neighborhood analysis*
---
**1. Core Profile**
- Risk Score: 25 (Low Risk)
- Ownership: Owned by UCLOUD INFORMATION TECHNOLOGY HK LIMITED (ASN 135377, ARIN-registered).
- Geolocation: Hong Kong (HK), coordinates 22.4°N, 114.11°E, time zone Asia/Hong_Kong.
- Network Role: Single-service host (SSH on port 22).
- Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).
- Control Plane:
- BGP prefix: 152.32.251.0/24 (UCLOUD-HK).
- DNSSEC valid, no CAA records.
- DNSBL listing count: 1 (out of 8 total lists).
- Route stability: Unstable (routeChanges30d = 0, but isRouteStable = false).
---
**2. Observation History**
- Recent Activity (2026-06-06):
- DNS resolution confirmed (MaxMind geolocation).
- SSH service detected (OpenSSH 8.0).
- No high-severity threats or campaign correlations.
- Historical Trends:
- No persistent malicious behavior (threatPersistenceDays = 0).
- Stable ownership (no recent changes).
---
**3. Relationships**
- Network Affiliation: Linked to UCLOUD-HK (same ASN, BGP prefix).
- No External Connections: No hostnames, certificates, or organizations tied to the IP.
---
**4. Neighborhood Analysis**
- Subnet: 152.32.251.0/24 (clean, abuseDensity = 0).
- Neighbors:
- 152.32.251.174: Risk score 0 (low risk).
- Total siblings: 1 (active = 0, threat siblings = 0).
---
**5. Key Findings & Recommendations**
- No Immediate Threat: Low risk score, no malicious indicators, and clean subnet.
- Monitor DNSBL Listings: 1 DNSBL entry (potential false positive or minor issue).
- Secure SSH: Ensure SSH configurations (e.g., key-based auth, rate limiting) are hardened.
- Verify Route Stability: Investigate BGP instability (isRouteStable = false) for potential network disruptions.
Conclusion: This IP is associated with a legitimate Hong Kong-based provider and shows no signs of active malicious activity. No urgent action required, but ongoing monitoring is advised for DNSBL and network stability.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | UCLOUD INFORMATION TECHNOLOGY HK LIMITED |
| ASN | AS135377 |
| Network Name | UCLOUD-HK |
| CIDR Block | 152.32.251.0/24 |
| RIR | ARIN |
| Country | HK |
| Abuse Contact | Available via RDAP |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Single-Service Host |
| Network Tier | Unknown โ Insufficient routing data to classify |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | โ |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.0 |
๐ TLS Certificate
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 20% | 10 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-05-11 15:04:09 UTC |
| Last Seen | 2026-06-26 10:08:23 UTC |
| Profile Built | 2026-06-26 10:13:06 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.