Your IP: 216.73.216.123
๐ค Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.
IP Intelligence Briefing: 191.237.248.60
Date: 2026-06-16
---
**1. Core Profile**
- Risk Rating: Moderate (Risk Score: 50)
- Provider: Microsoft Azure (CloudCompute)
- Geolocation: Brazil (São Paulo, Campinas), accuracy radius 2500 km
- Network Role: Firewalled / No Services (no open ports, no TLS/HTTP signatures)
- Ownership: Microsoft ASN (8075), no abuse reports
---
**2. Threat Indicators**
- No malicious activity detected: No indicators of spam, attacks, or known malicious campaigns.
- DNS & Certificates: No PTR records, no TLS certificates, no HTTP banners.
- Control Plane: BGP prefix (191.232.0.0/13) managed by Microsoft, DNSSEC valid.
---
**3. Observation History**
- 11 observations over 30 days:
- Geolocation: Consistent Brazil location (confidence 0.35โ0.90).
- DNSBL Listings: Listed in 2/8 DNSBLs (low severity, no high-risk entries).
- BGP: Stable route with Microsoft ASN.
---
**4. Network Relationships**
- No direct relationships (no subnets, hostnames, or certificates linked).
- Neighbor Analysis (191.237.248.0/24):
- 1 neighbor (191.237.248.153) with low risk (score: 0).
- Subnet abuse density: 0% (no malicious activity in sibling IPs).
---
**5. Recommendations**
- No immediate action required for this IP.
- Monitor: Track geolocation consistency and DNSBL status for anomalies.
- Cloud Context: Verify Azure resource legitimacy via Microsoft portal if suspicious activity emerges.
---
Source: IPDebrief Threat Intelligence Platform | © 2026 Jason Alberino
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
๐ข Ownership & Registration
| Organization | Microsoft 272945 Brasil LTDA |
| ASN | AS8075 |
| Network Name | 211137 |
| CIDR Block | 191.236.0.0/14 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | โ |
๐ DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No โ PTR hostname does not resolve back to this IP (weak signal) |
๐ DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
โ๏ธ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting โ Infrastructure provider without advanced routing |
๐ Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | โ |
| 443 | https | tcp | โ |
| 22 | ssh | tcp | |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Caddy |
| HTTP Title | โ |
| SSH Version | SSH-2.0-OpenSSH_8.9p1 Ubuntu-3ubuntu0.15 |
๐ TLS Certificate
No certificate
Issued by โ
N/A
| SANs | None |
| Valid From | โ |
| Valid Until | โ |
๐ฏ Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 4 |
| routing | 17% | 1 | 1 |
| services | 35% | 2 | 3 |
| ownership | 24% | 2 | 2 |
| reputation | 32% | 1 | 3 |
| geolocation | 17% | 1 | 1 |
| Overall | 27% | 9 | 14 |
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
๐ Observation Timeline ๐ Live
| First Seen | 2026-06-09 20:27:09 UTC |
| Last Seen | 2026-06-21 16:40:52 UTC |
| Profile Built | 2026-06-21 16:47:24 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 20 |
๐ 18 signal types ยท 20 observations collected
This report is generated from 18+ independent intelligence signals including
ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds,
behavioral fingerprinting, and more.
Full dossier details are available via our API.
Full dossier details are available via our API.
โน๏ธ About This Report
All data shown is publicly available network metadata โ IP addresses do not reliably identify individuals.
Assessments are probabilistic and should not be used as sole basis for access control decisions.
To report an issue or request data review, contact admin@ipdebrief.com.