13.67.236.135📋 Copy

# IP Intelligence Briefing: 13.67.236.135/32

## Executive Summary

IP address 13.67.236.135 is a Microsoft Azure cloud infrastructure endpoint located in Des Moines, Iowa. The IP exhibits moderate risk (Score: 50) primarily due to DNSBL listings and open SSH service. No active threat indicators detected. Infrastructure appears legitimate but warrants monitoring due to cloud hosting nature.

---

## Profile Overview

Ownership & Classification:

• Organization: Microsoft Corporation (ASN 8075)
• Network Role: CloudCompute infrastructure (Microsoft Azure)
• Geolocation: Des Moines, IA, US (Americas/Chicago timezone)
• BGP Prefix: 13.64.0.0/11
• Infrastructure Type: Cloud hosting environment

Risk Assessment:

• Overall Risk Score: 50 (Moderate)
• DNSBL Status: Listed on 2 of 8 threat feeds
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No

---

## Network Environment

Subnet Analysis (13.67.236.0/24):

• Abuse Density: 0% (Clean classification)
• Neighbor IP Count: 0
• Threat Siblings: 0
• Risk Distribution: High: 0, Medium: 0, Low: 0

The IP operates in isolation within its /24 subnet with no neighboring threats observed.

Associated Network: MSFT (Microsoft) - 29 relationship entries confirm infrastructure association with Microsoft ecosystem.

---

## Technical Services

Open Ports:

• Port 22/TCP: SSH (OpenSSH 7.6p1 Ubuntu-4ubuntu0.7)

DNS Status:

• Forward Resolution: Not confirmed
• PTR Hostnames: None
• Hosted Domains: 0

Control Plane:

• Origin ASN: 8075 (Microsoft)
• Route Stability: Not stable
• RPKI State: Unknown
• DNSSEC Valid: Yes

---

## Observation History (23 Observations)

Recent activity indicates:

• June 17, 2026: DNSBL listing activity detected (8 total lists, 2 listed)
• June 13, 2026: Geolocation confirmation - Des Moines, IA
• Infrastructure Classification: Consistently identified as Microsoft Azure cloud environment

No persistent malicious behavior observed. Threat persistence days: 0.

---

## Threat Indicators

• Campaign Correlation: None
• Certificate Matches: 0
• Banner Matches: 0
• Correlated IPs: 0
• Blacklist Count: 0 (traditional blacklists)

---

## Recommended Actions

Based on risk profile, consider the following defensive measures:

Firewall Rules:

```bash

# iptables

iptables -A INPUT -s 13.67.236.135 -j DROP

# nftables

nft add rule inet filter input ip saddr 13.67.236.135 drop

# Cloudflare WAF

ip.src eq 13.67.236.135

# AWS WAF

Addresses: 13.67.236.135/32

```

Note: These recommendations are probabilistic and should be combined with other signals before taking action. The moderate risk score warrants consideration, though legitimate Microsoft Azure infrastructure may be blocked inadvertently.

---

## Intelligence Assessment

The IP 13.67.236.135 represents legitimate Microsoft Azure cloud infrastructure. The moderate risk classification stems from:

1. DNSBL listings (2/8 feeds)

2. Open SSH service (common in cloud environments)

3. Cloud hosting classification

Recommendation: Monitor for behavioral anomalies rather than default block. If traffic is unexpected, verify against known Microsoft Azure IP ranges before taking action. The IP shows no evidence of malicious activity and operates within Microsoft's controlled infrastructure.

Classification: LOW THREAT - Cloud Infrastructure

Action Required: MONITOR

Priority: LOW

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.