4.204.225.112📋 Copy

# IP Intelligence Briefing: 4.204.225.112/32

## Executive Summary

IP address 4.204.225.112 is a Microsoft Azure cloud infrastructure endpoint classified as Low Risk with an overall risk score of 25. The IP operates within Microsoft's /12 address block (4.192.0.0/12), registered to Microsoft Corporation (ASN 8075). No active threat indicators, malicious campaigns, or significant abuse patterns were observed.

## Ownership and Infrastructure

• Organization: Microsoft Corporation (MSFT)
• ASN: 8075
• Network Range: 4.192.0.0/12
• Infrastructure Type: CloudCompute (Microsoft Azure)
• Location: Toronto, Ontario, Canada (CA)
• Network Classification: Cloud Provider / Hosting Infrastructure

## Risk Assessment

• Overall Risk Score: 25 (Low Risk)
• Provider Score: 0 (Microsoft infrastructure)
• Authority Score: 0
• Abuse Confidence: Not applicable (legitimate cloud provider)
• Blacklist Status: 0 of 8 major lists (single DNSBL detection noted)

## Threat Indicators

• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Active Campaigns: None detected
• Threat Persistence: 0 days
• Is Persistently Malicious: No

## Network Observations

• Open Ports: None detected
• Services: Firewalled / No accessible services
• DNS Resolutions: None
• Email Reputation: Not scored (no mail services)
• Reverse DNS: None

## Neighborhood Analysis

The /24 subnet (4.204.225.112/24) shows minimal abuse activity:

• Abuse Density: 0.5%
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 1
• Classification: Mostly clean
• Related IP: 4.204.225.251 (risk score 25, authority score 50)

## Historical Signals (21 observations)

Recent observations (August 2026) indicate:

• Traceroute signals successful with 18 hops
• ICMP validation blocked (unable to validate)
• DNSBL detection: 1 listing out of 8 lists checked (max severity: high)
• Operator score: 0.1304 (labeled "Minimal")

## Relationships

The IP maintains 11 relationship entries, all indicating same-network associations with Microsoft infrastructure. No external relationships to other organizations, hostnames, or certificates were identified.

## Recommended Actions

No immediate security actions required. The IP is part of Microsoft Azure's cloud infrastructure with no malicious indicators. Standard monitoring is recommended, but blocking is not advised.

---

Status: Low Risk - Standard Monitoring

Classification: Microsoft Azure Cloud Infrastructure

Last Updated: Based on current profile data

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.