# 63.135.161.149 — IP Intelligence Summary 63.135.161.149 is an IPv4 address operated by AS206092 Internet Utilities Europe and Asia Limited (AS206092), geolocated to New York, United States. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/63.135.161.149 - Last updated: 2026-10-07 ## Ownership - Organization: AS206092 Internet Utilities Europe and Asia Limited - Network name: IPXO-US-NY-NEW-YORK-CITY-63-135-161-0 - Allocated block: 63.135.161.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: New York - Region: US-NY - Country: United States - Time zone: America/New_York ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# IP Intelligence Briefing: 63.135.161.149 **Classification:** LOW RISK **Date:** Current Assessment **Analyst:** IPDebrief Intelligence Unit \## Executive Summary IP 63.135.161.149 presents as a low-risk address with a risk score of 25/100. The IP is assigned to AS206092 (Internet Utilities Europe and Asia Limited) within the 63.135.161.0/24 block in New York, US. Network classification indicates the address is firewalled with no active services, and no direct threat indicators have been observed. \## Technical Profile **Network Attribution:** \- ASN: 206092 \- Organization: AS206092 Internet Utilities Europe and Asia Limited \- CIDR: 63.135.161.0/24 \- Registration RIR: ARIN \- Network Name: IPXO-US-NY-NEW-YORK-CITY-63-135-161-0 **Geolocation:** \- Country: United States (US) \- Region: New York (US-NY) \- City: New York \- Timezone: America/New_York **Network Characteristics:** \- Network Role: Firewalled / No Services \- Open Ports: None detected \- DNS Resolution: No PTR hostnames; no forward resolution \- TLS/HTTP: No certificates; no HTTP banner \- Proxy/Tor/VPN: Not identified as any of these services **Threat Assessment:** \- Risk Score: 25 (Low Risk) \- Blacklist Count: 0 \- Known Attacker Status: False \- Spam Source Status: False \- Tor Exit Node: False \- Abuse Confidence Score: Not applicable \## Control Plane Analysis \- Operator Score: 0.1304 (Minimal) \- DNSBL Listed: 1 of 8 total lists \- Route Stability: Not stable (route changes observed in 30 days) \- RPKI State: Not applicable \- IRR Consistency: Not applicable \- DNSSEC: Valid \## Neighborhood Context The /24 subnet (63.135.161.0/24) contains 45 sibling IPs with the following risk distribution: \- High Risk: 0 \- Medium Risk: 2 \- Low Risk: 43 Abuse density for the subnet is 0 (clean). Notable neighboring addresses include: \- 63.135.161.170: Risk Score 60 (elevated) \- 63.135.161.156: Risk Score 40 (moderate) \- Multiple addresses with risk scores of 20-25 The subnet classification is "clean" with 34 active siblings out of 46 total. \## Observation History Fourteen signal observations recorded. Recent activity shows: \- **2026-07-28 15:04:19 UTC:** Threat signals detected via AlienVault OTX (4 pulses associated) \- **2026-07-28 15:02:27 UTC:** ASN 400384 (hostings house) geolocation correlation \- **2026-07-28 15:02:08 UTC:** MaxMind GeoLite2 geolocation (New York, US) \- **2026-07-28 15:06:19 UTC:** Ownership stability confirmed with zero ownership changes The IP has not demonstrated persistent malicious behavior (threat persistence days: 0). \## Relationships The IP is associated with three relationship entries, all pointing to the same network: \- IPXO-US-NY-NEW-YORK-CITY-63-135-161-0 No external entity relationships (organizations, hostnames, certificates) were identified. \## Recommendations Based on the low-risk profile and lack of active threat indicators, standard defensive measures are appropriate: 1. **Traffic Monitoring:** Continue monitoring for unusual outbound connections from this IP. 2. **Block List Status:** Not currently recommended for blocklist inclusion. 3. **Subnet Context:** Be aware of neighboring IPs with elevated risk scores (63.135.161.170, 63.135.161.156) that may require separate investigation. 4. **Historical Context:** Recent threat signals from OTX warrant awareness but do not indicate current malicious activity. \--- **Status:** No immediate action required. Maintain standard monitoring. ## Nearby addresses - 63.135.161.1 (https://ipdebrief.com/63.135.161.1) - 63.135.161.5 (https://ipdebrief.com/63.135.161.5) - 63.135.161.8 (https://ipdebrief.com/63.135.161.8) - 63.135.161.10 (https://ipdebrief.com/63.135.161.10) - 63.135.161.11 (https://ipdebrief.com/63.135.161.11) - 63.135.161.14 (https://ipdebrief.com/63.135.161.14) - 63.135.161.15 (https://ipdebrief.com/63.135.161.15) - 63.135.161.18 (https://ipdebrief.com/63.135.161.18) - 63.135.161.20 (https://ipdebrief.com/63.135.161.20) - 63.135.161.21 (https://ipdebrief.com/63.135.161.21) - 63.135.161.27 (https://ipdebrief.com/63.135.161.27) - 63.135.161.28 (https://ipdebrief.com/63.135.161.28) --- Source: IPDebrief, "63.135.161.149 IP intelligence", https://ipdebrief.com/63.135.161.149, updated 2026-10-07. Assessments are probabilistic.