63.135.161.149📋 Copy

# IP Intelligence Briefing: 63.135.161.149

Classification: LOW RISK

Date: Current Assessment

Analyst: IPDebrief Intelligence Unit

## Executive Summary

IP 63.135.161.149 presents as a low-risk address with a risk score of 25/100. The IP is assigned to AS206092 (Internet Utilities Europe and Asia Limited) within the 63.135.161.0/24 block in New York, US. Network classification indicates the address is firewalled with no active services, and no direct threat indicators have been observed.

## Technical Profile

Network Attribution:

• ASN: 206092
• Organization: AS206092 Internet Utilities Europe and Asia Limited
• CIDR: 63.135.161.0/24
• Registration RIR: ARIN
• Network Name: IPXO-US-NY-NEW-YORK-CITY-63-135-161-0

Geolocation:

• Country: United States (US)
• Region: New York (US-NY)
• City: New York
• Timezone: America/New_York

Network Characteristics:

• Network Role: Firewalled / No Services
• Open Ports: None detected
• DNS Resolution: No PTR hostnames; no forward resolution
• TLS/HTTP: No certificates; no HTTP banner
• Proxy/Tor/VPN: Not identified as any of these services

Threat Assessment:

• Risk Score: 25 (Low Risk)
• Blacklist Count: 0
• Known Attacker Status: False
• Spam Source Status: False
• Tor Exit Node: False
• Abuse Confidence Score: Not applicable

## Control Plane Analysis

• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 1 of 8 total lists
• Route Stability: Not stable (route changes observed in 30 days)
• RPKI State: Not applicable
• IRR Consistency: Not applicable
• DNSSEC: Valid

## Neighborhood Context

The /24 subnet (63.135.161.0/24) contains 45 sibling IPs with the following risk distribution:

• High Risk: 0
• Medium Risk: 2
• Low Risk: 43

Abuse density for the subnet is 0 (clean). Notable neighboring addresses include:

• 63.135.161.170: Risk Score 60 (elevated)
• 63.135.161.156: Risk Score 40 (moderate)
• Multiple addresses with risk scores of 20-25

The subnet classification is "clean" with 34 active siblings out of 46 total.

## Observation History

Fourteen signal observations recorded. Recent activity shows:

• 2026-07-28 15:04:19 UTC: Threat signals detected via AlienVault OTX (4 pulses associated)
• 2026-07-28 15:02:27 UTC: ASN 400384 (hostings house) geolocation correlation
• 2026-07-28 15:02:08 UTC: MaxMind GeoLite2 geolocation (New York, US)
• 2026-07-28 15:06:19 UTC: Ownership stability confirmed with zero ownership changes

The IP has not demonstrated persistent malicious behavior (threat persistence days: 0).

## Relationships

The IP is associated with three relationship entries, all pointing to the same network:

• IPXO-US-NY-NEW-YORK-CITY-63-135-161-0

No external entity relationships (organizations, hostnames, certificates) were identified.

## Recommendations

Based on the low-risk profile and lack of active threat indicators, standard defensive measures are appropriate:

1. Traffic Monitoring: Continue monitoring for unusual outbound connections from this IP.

2. Block List Status: Not currently recommended for blocklist inclusion.

3. Subnet Context: Be aware of neighboring IPs with elevated risk scores (63.135.161.170, 63.135.161.156) that may require separate investigation.

4. Historical Context: Recent threat signals from OTX warrant awareness but do not indicate current malicious activity.

---

Status: No immediate action required. Maintain standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.