IP Intelligence Briefing: 191.237.255.78
Date: 2026-06-10
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Provider: Microsoft Azure (CloudCompute)
- Ownership: Microsoft 272945 Brasil LTDA (ASN 8075)
- Geolocation: Brazil (SP, Campinas)
- Network Role: Hosting / Cloud Infrastructure
- Threat Indicators: No malicious activity detected (no abuse reports, spam, or known attacker associations).
---
**2. Observation History**
- Latest Signals (June 10, 2026):
- Confirmed as a Microsoft Azure cloud host with no open ports or TLS certificates.
- DNSSEC validation: Enabled (no DNSSEC-related risks).
- ICMP validation: Blocked, preventing geo-verification (potential firewall rule or network segmentation).
- Historical Trends:
- 17 observations over 9 days, showing consistent infrastructure behavior.
- No spikes in threat activity or network anomalies.
---
**3. Relationships & Network Context**
- Linked Entities:
- Subnet 191.237.255.0/24 (abuse density: 0.5, classified as "mostly clean").
- Neighbor IP: 191.237.255.6 (risk score: 25/100, authority score: 50).
- Subnet Analysis:
- 2 active sibling IPs; 1 flagged as potentially risky.
- No direct ties to malicious campaigns or threat feeds.
---
**4. Threat & Risk Summary**
- No direct malicious indicators (no spam, abuse reports, or known attacker associations).
- ICMP blocking suggests network segmentation or security controls, but may impact geo-validation accuracy.
- Cloud infrastructure (Microsoft Azure) is likely legitimate, but monitoring is advised for unexpected behavior.
---
**5. Recommended Actions**
- Allowlist: Permit traffic to 191.237.255.78 if itβs a known cloud service (e.g., Azure) required for operations.
- Monitor: Track anomalies in subnet 191.237.255.0/24 for potential lateral movement or new threats.
- Investigate: Confirm ICMP blocking is intentional (e.g., firewall rules) and verify geo-validation methods.
---
Source: IPDebrief Threat Intelligence Platform.
Note: No immediate action required, but continuous monitoring is recommended for cloud infrastructure hosts.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft 272945 Brasil LTDA |
| ASN | AS8075 |
| Network Name | 211137 |
| CIDR Block | 191.236.0.0/14 |
| RIR | LACNIC |
| Country | BR |
| Abuse Contact | β |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 19% | 2 | 2 |
| reputation | 32% | 1 | 3 |
| geolocation | 33% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-24 12:34:28 UTC |
| Last Seen | 2026-06-29 00:04:35 UTC |
| Profile Built | 2026-06-29 06:07:54 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.