IPDebrief

4.205.213.117

IP Intelligence Dossier
Your IP: 216.73.216.123
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP INTELLIGENCE BRIEFING: 4.205.213.117/32

Classification: Microsoft Azure Cloud Infrastructure

Risk Assessment: Low Risk (Score: 25/100)

Report Date: 2026-06-16

---

## EXECUTIVE SUMMARY

IP 4.205.213.117 is a Microsoft Azure cloud infrastructure address with low-risk profile. The IP shows no active threat indicators, no blacklist presence, and no known malicious activity. Standard defensive posture recommended.

---

## OWNERSHIP AND INFRASTRUCTURE

AttributeValue
**Organization**Microsoft Corporation
**ASN**8075 (MSFT)
**CIDR Block**4.192.0.0/12
**RIR**ARIN
**Infrastructure Type**Microsoft Azure (Cloud)
**Connection Type**Firewalled / No Services

---

## GEOLOCATION

AttributeValue
**Country**Canada (CA)
**Region**Ontario (ON)
**City**Toronto
**Coordinates**43.65°N, -79.38°W
**Timezone**America/Toronto
**Accuracy Radius**150 km

*Note: Geographic validation flags indicate geoPlausible: false. Multiple geolocation sources provide consensus data.*

---

## THREAT INTELLIGENCE

IndicatorStatus
**Abuse Confidence**Null
**Is Tor Exit**No
**Is Known Attacker**No
**Is Spam Source**No
**Blacklist Count**0
**Threat Feeds**None
**Known Campaigns**None
**DNSBL Listed**1 of 8 lists

Observation History: 16 signal observations recorded. Threat observation count: 1. Not persistently malicious.

---

## NETWORK BEHAVIOR

AttributeValue
**Open Ports**None detected
**TLS Certificate**None
**HTTP Title**None
**Service Purpose**Firewalled / No Services
**Honeypot Hits**0
**Enumeration Strikes**0
**WAF Violations**0
**Total Incidents**0

---

## NEIGHBORHOOD ANALYSIS

AttributeValue
**Subnet**4.205.213.117/24
**Abuse Density**1
**Classification**Mostly Clean
**Inherited Risk**2
**Total Siblings**1
**Active Siblings**0
**Threat Siblings**1

---

## CONTROL PLANE

AttributeValue
**BGP Prefix**4.192.0.0/12
**Origin ASN**8075
**Route Stability**Unstable (isRouteStable: false)
**Route Changes (30d)**0
**RPKI State**Not assessed
**DNSSEC Valid**Yes
**Operator Score**0.1304 (Minimal)
**Hop Count**30
**First Hop RTT**0.2 ms
**Last Hop RTT**35.3 ms
**Timed Out Hops**20
**Transit Network**Comcast

---

## RELATIONSHIP GRAPH

TypeTarget
Same NetworkMSFT

---

## DNS ANALYSIS

AttributeValue
**PTR Hostnames**None
**Forward Resolution**Not confirmed
**Hosted Domains**0
**SPF Record**None
**DMARC Record**None
**TXT Record Count**0

---

## SECURITY ACTIONS RECOMMENDATION

Risk Score: 25/100 — Low Risk

Recommended Actions: None required. No firewall rules or blocking actions recommended based on current risk profile.

Note: IP represents standard Microsoft Azure cloud infrastructure with no active malicious indicators.

---

## ANALYST NOTES

1. Low-Risk Profile: IP 4.205.213.117 is a Microsoft Azure address with no active threat indicators, no blacklist presence, and zero incidents.

2. Cloud Infrastructure: Identified as Microsoft Azure provider (firewalled/no services). No open ports or services detected.

3. Neighborhood Context: Subnet shows abuse density of 1 with 1 threat sibling. Classification remains "mostly clean."

4. Monitoring: No specific monitoring required beyond standard cloud infrastructure baseline. No firewall rules recommended.

5. Historical Signals: 16 observations recorded with recent signals from 2026-06-16 showing ownership and routing information consistent with Microsoft infrastructure.

---

Status: Monitor | Priority: Low | Action: None Required

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇨🇦 Canada
RegionON
CityToronto
TimezoneAmerica/Toronto
Latitude43.65
Longitude-79.38

🏢 Ownership & Registration

OrganizationMicrosoft Corporation
ASNAS8075
Network NameMSFT
CIDR Block4.192.0.0/12
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting — Infrastructure provider without advanced routing
Cloud

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
35%
23
routing
17%
11
services
17%
11
ownership
35%
23
reputation
28%
13
geolocation
17%
11
Overall25%812
Coverage: 6/6 dimensions · Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) — 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Geo sources disagree on country: US, CA

📅 Observation Timeline 🔄 Live

First Seen2026-06-11 15:08:48 UTC
Last Seen2026-06-21 19:03:15 UTC
Profile Built2026-06-21 19:05:29 UTC
Data FreshnessLive
Signal Types17
Total Observations19
🔍 17 signal types · 19 observations collected
This report is generated from 17+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.