36.132.228.184📋 Copy

# IP Intelligence Briefing: 36.132.228.184/32

Classification: Moderate Risk | Date: 2026-07-25 | Analysis: Defensive Security Assessment

---

## Executive Summary

IP address 36.132.228.184 is classified as a Moderate Risk endpoint with a risk score of 40. The address is registered to entity "haijun li" within the CMNET infrastructure under AS132525. While no active threat indicators were observed, the IP exhibits characteristics consistent with residential or lightly utilized infrastructure. No open services, active threat campaigns, or blacklist entries were detected.

---

## Ownership and Geolocation

---

## Threat Assessment

Current Risk Profile:

• Risk Score: 40/100 (Moderate)
• Abuse Confidence: Not scored (data unavailable)
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Count: 0
• Threat Feeds: None detected

Service Status:

• Open Ports: None detected
• Network Role: Firewalled / No Services
• Infrastructure Type: Not classified as CDN, Cloud, VPN, Proxy, or Hosting

---

## Network Neighborhood Analysis

Subnet: 36.132.228.0/24

• Abuse Density: 12.5% (0.125)
• Classification: mostly_clean
• Total Siblings: 8
• Active Siblings: 2
• Threat Siblings: 1

Adjacent IP Risk Distribution:

• High Risk: 0
• Medium Risk: 4 (36.132.228.60, 36.132.228.142, 36.132.228.144, 36.132.228.167)
• Low Risk: 3 (36.132.228.6, 36.132.228.89, 36.132.228.114)

---

## Observation History

Fifteen signal observations recorded for this address. Recent activity indicates:

• Consistent ownership attribution to "haijun li"
• No ownership changes detected
• No persistent malicious behavior observed
• Neighborhood risk assessment stable at "mostly_clean" classification

---

## Related Entities

• Network Association: CMNET
• Control Plane: BGP prefix 36.132.228.0/24
• Route Stability: Unstable routing observed
• DNSSEC: Valid

---

## Recommended Actions

Firewall Rule Generation:

Note: These recommendations are probabilistic and should be combined with other threat intelligence signals before implementing blocking rules.

---

## Intelligence Summary

The IP 36.132.228.184 presents a moderate risk profile typical of residential or lightly utilized Chinese infrastructure. While no active malicious indicators were observed, the medium-risk neighborhood context (12.5% abuse density) warrants monitoring. The absence of services and open ports reduces immediate threat exposure, but the moderate risk score suggests potential for future abuse or participation in low-level scanning activities.

Recommendation: Apply monitoring rules and consider blocking based on organizational threat posture. No immediate threat action required absent additional correlating intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.