165.154.163.109📋 Copy

# IP Intelligence Briefing: 165.154.163.109

## Executive Summary

This IP address is associated with UCLOUD INFORMATION TECHNOLOGY HK LIMITED (ASN 135377) and is currently classified as Low Risk (risk score: 25). No active threat indicators were detected. The IP shows minimal service exposure and maintains DNSSEC validation.

## Ownership and Classification

• Organization: UCLOUD INFORMATION TECHNOLOGY HK LIMITED
• Network Name: UCLOUD-US
• CIDR Block: 165.154.162.0/23
• ASN: 135377
• Classification: Cloud infrastructure provider
• Geolocation: Los Angeles, CA, US

## Threat Assessment

Current Risk Score: 25 (Low Risk)

Threat Indicators:

• No active threat campaigns
• Not identified as Tor exit node or proxy
• No spam source classification
• Zero blacklist hits at time of analysis

Observed Signals:

• Recent blacklist listing activity detected (July 23, 2026): 8 total DNSBL listings with 1 high-severity listing
• DNSSEC validation confirmed
• No reverse DNS PTR records

## Network Environment Analysis

/24 Neighborhood (165.154.163.0/24):

• Total siblings: 11
• Abuse density: 0 (low)
• Risk distribution: 0 high-risk, 4 medium-risk, 6 low-risk neighbors
• Notable neighbors include: 165.154.163.113 (risk: 50), 165.154.163.122 (risk: 50), 165.154.163.160 (risk: 40)

Service Exposure:

• No open ports detected
• No active TLS certificates or web services
• Classification: Firewalled / No Services

## Historical Context

Observation history indicates 12 recorded signals. Geolocation data shows minor inconsistencies with confidence levels between 0.28-0.90. The IP has maintained stable network ownership with no recent changes.

## Recommendations

No immediate blocking action required based on current risk profile. The IP is associated with a legitimate cloud provider and shows low-risk characteristics. However, SOC teams should:

1. Monitor for changes in DNSBL listing status

2. Review incoming traffic patterns for this ASN

3. Consider context-based filtering if traffic volume increases

4. Correlate with any observed malicious activity from this subnet

No firewall rules generated due to low risk score (25).

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.