4.223.135.162
THREAT INTELLIGENCE BRIEFING
Target IP: 4.223.135.162/32
Date: 2026-07-24
Classification: MODERATE RISK
Owner: Microsoft Corporation (ASN 8075)
---
EXECUTIVE SUMMARY
IP 4.223.135.162 is a Microsoft Azure cloud compute infrastructure endpoint. The address resides within Microsoft's 4.208.0.0/12 CIDR block and exhibits no open ports or active services. While the IP shows a moderate risk score (50/100), operational indicators suggest legitimate cloud infrastructure use. Recent blacklist activity requires monitoring.
---
NETWORK CLASSIFICATION
- Provider: Microsoft Azure (CloudCompute)
- Infrastructure Type: Cloud Hosting
- Geolocation: United States (Washington, WA region)
- Network Stability: Route changes observed; not MoAS
- DNS Classification: No PTR records; no forward resolution
---
THREAT ASSESSMENT
| Indicator | Status |
|---|---|
| Known Attacker | False |
| Tor Exit Node | False |
| Spam Source | False |
| Blacklist Count | 0 |
| Open Ports | None |
| TLS Certificate | None |
| Active Threat Indicators | None |
Risk Score: 50 (Moderate)
Abuse Confidence: Not applicable for cloud infrastructure
---
OBSERVATION HISTORY
16 total signals observed. Key observations:
- 2026-07-23: High-severity listing detected (8 total blacklist listings)
- 2026-07-05: Multiple signals including geolocation and operator classification data
- No persistent malicious activity patterns identified
- Threat persistence: 0 days
---
SUBNET ANALYSIS (4.223.135.0/24)
- Abuse Density: 0%
- Active Siblings: 0
- Threat Siblings: 0
- Risk Distribution: Clean subnet classification
- No neighboring IPs flagged for malicious activity
---
RELATIONSHIP GRAPH
- Direct Links: 3 (all "Same Network" to MSFT/MSFT/MSFT)
- No associations with: external organizations, certificates, or malicious hostnames
---
SOC RECOMMENDATIONS
1. Monitor: Track blacklist activity trends; current high-severity listing requires verification
2. Allow: Legitimate Microsoft Azure traffic; no active threat indicators
3. Firewall: Standard Microsoft Azure egress/ingress policies apply; no custom blocks required
4. Correlation: Correlate with known Microsoft Azure traffic patterns for baseline validation
5. Investigate: Verify source of high-severity blacklist listing from 2026-07-23
---
CONFIDENCE LEVEL: HIGH
Data Sources: IPDebrief Intelligence Platform
Analysis Type: Cloud Infrastructure Assessment
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 4.208.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 4.208.0.0/12 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 24% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 11:16:31 UTC |
| Last Seen | 2026-08-26 20:35:46 UTC |
| Profile Built | 2026-08-29 07:33:10 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 24 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 4.223.135.162
Who owns the IP address 4.223.135.162?
4.223.135.162 is registered to Microsoft Corporation. The address falls within the 4.208.0.0/12 network block. Registration is held at ARIN.
Where is 4.223.135.162 located?
Geolocation data places 4.223.135.162 in Stockholm, AB, Sweden. The local time zone is Europe/Stockholm. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 4.223.135.162 malicious or safe?
4.223.135.162 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 4.223.135.162 a VPN, proxy, or data center address?
4.223.135.162 is classified as cloud infrastructure based on network ownership and behavioural analysis.