49.51.252.142

{ } JSON 🔧 Full Actions API

🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP Intelligence Briefing: 49.51.252.142

Date: June 7, 2026

1. Core Profile

Risk Rating: Low Risk (0/100) | No threat indicators | Minimal operational risk
Ownership: Registered to James Tian (TencentCloud) under APNIC.
Geolocation: Santa Clara, CA, US (MaxMind) but linked to Shenzhen, China (ownership data).
Network Role: Firewalled / No services detected.

2. Threat & Behavior

Malicious Activity: No abuse reports, blacklist entries, or campaign correlations.
DNS: Unresolvable PTR records; DNSSEC and CAA records present but no domain associations.
Services: No open ports, TLS certs, or HTTP banners detected.

3. Network Relationships

Subnet: 49.51.252.142/24 (abuse density: 0%).
Neighbors: 1 sibling IP (49.51.252.146) with low risk (25/100).
Provider: No direct ISP ties; classified as "Unknown" infrastructure.

4. Temporal Observations

History: Minimal signal changes (0–30 days). Last observed June 7, 2026, with stable DNSSEC and CAA records.
Activity Trends: No spikes in scans, enumerations, or WAF violations.

5. Recommended Actions

Monitoring: Track geolocation discrepancies (US vs. China) and DNS resolution stability.
Firewall: No immediate blocking required; consider allowing traffic if associated with legitimate cloud workflows.
Verification: Validate ownership ties to TencentCloud and investigate DNS timeout anomalies.

Conclusion:

This IP is associated with a legitimate cloud provider but exhibits odd geolocation data and DNS configuration issues. No active threats detected, but anomalies warrant further investigation to confirm operational legitimacy.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country	🇺🇸 United States
Region	CA
City	Santa Clara
Timezone	—
Latitude	37.35
Longitude	-121.95

🏢 Ownership & Registration

Organization	James Tian
ASN	AS132203
Network Name	TencentCloud
CIDR Block	49.51.0.0/16
RIR	APNIC
Country	US
Abuse Contact	—

🌐 DNS Intelligence

PTR Record	No PTR
Forward Confirmed	No — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score	40% (Fair)
SPF	Not configured
DMARC	Not configured
FCrDNS	Not verified
DNSSEC	Valid
CAA	Present

☁️ Network Classification

Infrastructure	Unknown
Service Purpose	Firewalled / No Services
Network Tier	Unknown — Insufficient routing data to classify

No specific classification

🔌 Services & Open Ports

Port	Service	Protocol	Banner
No open ports detected

Server	—
HTTP Title	—

🔐 TLS Certificate

🔒

No certificate

Issued by —

N/A

SANs	None
Valid From	—
Valid Until	—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

Dimension	Score	Sources	Observations
threat	13%	1	1
routing	13%	1	1
services	13%	1	1
ownership	19%	2	2
reputation	13%	1	2
geolocation	13%	1	1
Overall	14%	7	8

Coverage: 6/6 dimensions · Data sufficiency: sufficient

Data Coherence	Consistent (100%)
Attribution	Moderate (50%)
	OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen	2026-05-16 08:57:24 UTC
Last Seen	2026-06-13 03:45:55 UTC
Profile Built	2026-06-07 21:55:25 UTC
Data Freshness	Live
Signal Types	18
Total Observations	19

🔍 18 signal types · 19 observations collected

This report is generated from 18+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.

{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.

49.51.252.142📋 Copy