4.225.39.110📋 Copy

# IP Intelligence Briefing: 4.225.39.110/32

Date: 2026-06-25

Classification: Low Risk - Microsoft Azure Infrastructure

Risk Score: 25/100

## Executive Summary

IP 4.225.39.110 is a Microsoft Azure cloud compute endpoint located in Stockholm, Sweden (AB region). The IP presents a low risk profile with no active threat indicators. Infrastructure is associated with Microsoft Corporation (ASN 8075) and operates within a clean network neighborhood with zero abuse density.

## Technical Profile

## Network Services & Fingerprint

• Open Ports: TCP/443 (HTTPS), TCP/22 (SSH)
• SSH Banner: OpenSSH_9.6p1 Ubuntu-3ubuntu13.16
• TLS Certificate: TRAEFIK DEFAULT CERT (self-signed, internal certificate)
• HTTP/2: Enabled
• Response Time: 330ms
• HTTP Status: 404 (Not Found)
• Security Headers: No CSP or HSTS headers present

## Threat Intelligence

Active Threat Indicators: None detected

• Blacklist Count: 0
• Known Campaigns: None
• Is Tor Exit: No
• Is Known Attacker: No
• Is Spam Source: No

Control Plane Analysis:

• DNSBL Listed: 1 of 8 lists (minimal operator score: 0.1304)
• Route Stability: False
• DNSSEC Valid: True
• RPKI State: Not evaluated

## Neighborhood Assessment

Subnet 4.225.39.0/24 analysis:

• Abuse Density: 0%
• Classification: Mostly Clean
• Active Siblings: 1
• Threat Siblings: 1 (inherited risk score: 2)

## Historical Observations

19 observations recorded through 2026-06-25. No significant temporal threat evolution detected. Consistent cloud infrastructure behavior with no evidence of malicious activity progression.

## Related Entities

27 network relationships identified, all associated with Microsoft (MSFT) network infrastructure. No external or third-party entity correlations detected.

## Recommended Actions

No immediate blocking or mitigation required. This IP represents legitimate Microsoft Azure cloud infrastructure.

For SOC Operations:

• Allow standard traffic to/from this IP on expected ports (443, 22)
• No firewall rules recommended
• Continue monitoring for any behavioral changes
• Treat as trusted infrastructure component

Note: The SSH service on port 22 is open, which is common for cloud compute instances. Standard hardening practices apply, but no threat-based action is warranted at this time.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.