163.223.76.136📋 Copy

# IP Intelligence Briefing: 163.223.76.136/32

## Executive Summary

IP address 163.223.76.136 was assessed as low-risk during observation. The address belongs to Medrozo IT Solutions administrator under ASN 136433 (MEDROZO-AS-AP) and is geolocated to Macabalán, Philippines. No active threat indicators were identified, and the IP shows minimal malicious activity in historical observations.

## Network Attribution

• Organization: Medrozo IT Solutions administrator
• ASN: 136433
• CIDR Block: 163.223.76.0/24
• RIR: APNIC
• Geolocation: Philippines (PH), Macabalán
• Timezone: Asia/Manila

The address resolves to a legitimate internet service provider network with administrative contact available via RDAP.

## Threat Assessment

• Risk Score: 25 (Low Risk)
• Abuse Confidence: Not applicable
• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• DNSBL Listings: 1 of 8 total lists
• Campaign Associations: None identified

No active threat feeds flagged the IP. The address does not exhibit persistent malicious behavior or known campaign participation.

## Technical Profile

• Network Role: Firewalled / No Services
• Open Ports: None detected
• TLS Certificate: None
• DNS Resolution: No forward resolution; no hosted domains
• Email Authentication: No SPF, DMARC, or TXT records detected
• Control Plane: Route stability issues detected (isRouteStable: false)
• BGP Prefix: 163.223.76.0/24
• RPKI State: Not validated
• IR Consistency: Not assessed

The IP shows no evidence of hosting services, proxy functionality, or CDN infrastructure.

## Historical Context

Fifteen signal observations recorded since 2026-07-22 indicate stable network conditions:

• Ownership stability: No changes detected
• Threat persistence: 0 days
• Total threat observations: 1
• Classification: Mostly clean with inherited risk score of 7
• Recent scans showed no open ports or banner services

The historical trend demonstrates consistent low-risk classification across multiple observation periods.

## Related Entities

Relationship graph identified three connections, all mapping to the same network entity (MEDROZO-AS-AP):

• Same Network Relationships: MEDROZO-AS-AP (3 entries)

No organizational, certificate, or hostname relationships were identified beyond the network-level association.

## Neighborhood Analysis

The /24 subnet (163.223.76.0/24) shows the following characteristics:

• Subnet Classification: Mostly clean
• Abuse Density: 0
• Total Siblings: 3
• Active Siblings: 0
• Threat Siblings: 3
• Inherited Risk: 7

Adjacent IP addresses include 163.223.76.130 and 163.223.76.158, both with risk score 25 and authority score 50. No high-risk neighbors were identified.

## Recommended Actions

No specific firewall or blocking recommendations were generated. The low-risk classification (score 25) and absence of active threat indicators suggest standard monitoring without blocking. SOC analysts may apply permissive rules while maintaining standard network segmentation.

---

*Intelligence produced from IPDebrief data as of 2026-07-22. Recommendations should be combined with other signals before taking action.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.