IP Intelligence Briefing: 45.43.58.87
Date: 2026-06-03
---
**1. Risk Profile**
- Risk Score: 40 (Moderate Risk)
- Provider: UCLOUD (ASN 135377)
- Geolocation: Los Angeles, California, US (latitude 39.83, longitude -98.58)
- Threat Indicators: No malicious indicators, no known attacker/spam source, no blacklist entries.
- Network Role: Firewalled infrastructure with no open services or TLS certificates detected.
---
**2. Observational History**
- Last 30 Days: 17 observations recorded.
- Key Trends:
- Stable risk score with no significant fluctuations.
- Geolocation data consistently points to Los Angeles.
- No signs of dynamic IP changes or scanning activity.
- DNSSEC: Validated, but no email authentication (SPF/DKIM) detected.
---
**3. Network Relationships**
- Subnet: 45.43.58.0/24 (UCLOUD network "ZL-HKG-UCLOUD-0056").
- Neighbors: No active neighboring IPs identified in the subnet (0 siblings).
- Abuse Density: Subnet classified as "mostly_clean" with low inherited risk.
---
**4. Threat Context**
- DNSBL Listings: 2/8 DNSBL entries (potential spam or abuse risk).
- BGP: Route stability flagged as "unstable" with no RPKI validation.
- No Campaign Links: No correlation to known malicious campaigns or certificates.
---
**5. Recommendations**
1. Monitor DNS: Investigate DNSBL listings for potential spam or abuse activity.
2. Network Segmentation: Ensure isolation of this subnet from critical assets due to unstable BGP routes.
3. Verify Ownership: Confirm UCLOUD's compliance with DNSSEC and email security standards.
4. Longitudinal Watch: Track changes in geolocation or DNS behavior over time.
Conclusion: This IP poses no immediate active threat but requires monitoring for DNS-related risks and network stability. No urgent mitigation actions are required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | UCLOUD |
| ASN | AS135377 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown β Insufficient routing data to classify |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 21% | 1 | 3 |
| geolocation | 21% | 2 | 2 |
| Overall | 20% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-07 23:04:21 UTC |
| Last Seen | 2026-06-23 13:46:43 UTC |
| Profile Built | 2026-06-23 14:04:52 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 20 |
Full dossier details are available via our API.