IPDebrief

135.225.76.161

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 135.225.76.161/32

Date: Current Analysis Period

Classification: LOW RISK

Risk Score: 25/100

Primary Provider: Microsoft Azure (ASN 8075)

---

## Executive Summary

IP 135.225.76.161 is a Microsoft Azure cloud infrastructure endpoint located in Stockholm, Sweden. The IP exhibits minimal threat indicators, with no active malicious activity detected. The address operates within a clean cloud computing environment with no evidence of abuse or malicious behavior.

---

## Network Classification & Ownership

AttributeValue
**ASN**8075
**Organization**Divya Quamara
**Network Role**Cloud Infrastructure (Microsoft Azure)
**Infrastructure Type**CloudCompute
**BGP Prefix**135.224.0.0/15
**CIDR Block**135.225.0.0/16
**Registration**ARIN

Network Classification Flags:

---

## Geolocation Data

FieldValue
**Country**Sweden (SE)
**Region**AB
**City**Stockholm
**Coordinates**59.60°N, 18.26°E
**Timezone**Europe/Stockholm
**Geo Confidence**High (multi-signal inference)
**Accuracy Radius**144 km

---

## Threat Intelligence Profile

Threat Indicators: None detected

IndicatorStatus
**Known Attacker**Not listed
**Tor Exit Node**Not detected
**Spam Source**Not identified
**Blacklist Count**0
**DNSBL Listed**1 of 8 lists
**Abuse Confidence Score**Not applicable
**Threat Persistence Days**0
**Is Persistently Malicious**No

Campaign Correlation:

---

## Observation History

Analysis of 20 historical observations reveals consistent cloud infrastructure behavior:

Recent Signals (June 2026):

Temporal Analysis:

---

## Neighborhood Analysis (135.225.76.0/24)

MetricValue
**Subnet Abuse Density**1 (low)
**Classification**Mostly Clean
**Active Siblings**1
**Threat Siblings**1
**Total Siblings**1
**High Risk Neighbors**0
**Medium Risk Neighbors**0
**Low Risk Neighbors**0

The /24 subnet demonstrates minimal abuse activity, with no high-risk neighbors detected.

---

## Service & DNS Analysis

DNS Configuration:

Service Scanning:

Control Plane:

---

## Recommended Security Actions

Action Priority: MONITOR ONLY

Based on the current risk profile (25/100), no immediate blocking or mitigation actions are required. The IP presents minimal threat to network security.

Recommended Approach:

---

## Intelligence Assessment

The IP address 135.225.76.161 represents a legitimate Microsoft Azure cloud computing resource with no malicious indicators. The absence of open ports, combined with the clean neighborhood profile and consistent geolocation data from Stockholm, Sweden, indicates this is a standard cloud infrastructure endpoint.

Key Findings:

1. ✓ No active threat indicators

2. ✓ No blacklist associations

3. ✓ Clean neighborhood profile

4. ✓ Consistent cloud provider attribution

5. ✓ No evidence of malicious behavior

SOC Analyst Action: No action required. Standard monitoring procedures apply. This IP does not warrant special handling or escalation.

---

*Report generated from IPDebrief intelligence platform data. All information based on observed signals and threat intelligence feeds.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇸🇪 Sweden
RegionAB
CityStockholm
TimezoneEurope/Stockholm
Latitude59.60
Longitude18.26

🏢 Ownership & Registration

OrganizationDivya Quamara
ASNAS8075
Network Name—
CIDR Block—
RIRARIN
Country—
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting — Infrastructure provider without advanced routing
CloudHosting

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
24
routing
8%
11
services
12%
22
ownership
24%
23
reputation
26%
13
geolocation
30%
23
Overall21%1016
Coverage: 6/6 dimensions · Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-05-07 23:03:40 UTC
Last Seen2026-06-26 22:23:28 UTC
Profile Built2026-06-27 18:35:59 UTC
Data FreshnessLive
Signal Types19
Total Observations26
🔍 19 signal types · 26 observations collected
This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.