# 63.135.161.184 — IP Intelligence Summary 63.135.161.184 is an IPv4 address operated by AS206092 Internet Utilities Europe and Asia Limited (AS206092), geolocated to New York, United States. As of October 7, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/63.135.161.184 - Last updated: 2026-10-07 ## Ownership - Organization: AS206092 Internet Utilities Europe and Asia Limited - Network name: IPXO-US-NY-NEW-YORK-CITY-63-135-161-0 - Allocated block: 63.135.161.0/24 - ASN: AS206092 (https://ipdebrief.com/asn/206092) - Regional registry: ARIN ## Location - City: New York - Region: New York - Country: United States - Time zone: — ## Network classification - Infrastructure type: — - Datacenter / hosting: no - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Analyst narrative \# INTELLIGENCE BRIEFING: 63.135.161.184 **Classification:** LOW RISK **Date:** 2026-07-28 **Analyst:** IPDebrief Intelligence \--- \## EXECUTIVE SUMMARY IP address 63.135.161.184 is classified as **Low Risk** (Risk Score: 25/100). The address belongs to a clean residential/hosting subnet with minimal abuse density. No active threat indicators, blacklist entries, or malicious campaigns were identified. The IP is currently firewalled with no exposed services. \--- \## NETWORK OWNERSHIP & GEOSPATIAL ANALYSIS | Attribute | Value | |-----------|-------| | ASN | 206092 | | Organization | AS206092 Internet Utilities Europe and Asia Limited | | CIDR Block | 63.135.161.0/24 | | RIR | ARIN | | Claimed Location | New York, US | | Geolocation Validity | **Implausible** (RTT violation) | The claimed geolocation shows significant anomalies. The IP claims to originate in New York, but traceroute analysis indicates a minimum possible RTT of 119.4ms for 5,968km distance, while observed RTT was only 21.0ms—physically impossible. This suggests either inaccurate DNS/WHOIS data or spoofed geolocation information. **Traceroute Summary:** 11 hops via Comcast backbone network. \--- \## THREAT INDICATOR ASSESSMENT | Indicator | Status | |-----------|--------| | Is Tor Exit Node | No | | Is Known Attacker | No | | Is Spam Source | No | | Blacklist Count | 0 | | Threat Feeds | None | | Known Campaigns | None | | DNSBL Listed | 1 of 8 lists | No active threat indicators were detected. The single DNSBL listing is likely a false positive or temporary flag. \--- \## SUBNET NEIGHBORHOOD ANALYSIS The /24 subnet (63.135.161.0/24) contains 46 total sibling IPs with the following profile: | Metric | Value | |--------|-------| | Abuse Density | 0.0435 (4.35%) | | Classification | Clean | | Active Siblings | 34 of 46 | | Threat Siblings | 2 | **Risk Distribution:** \- High Risk: 0 \- Medium Risk: 1 \- Low Risk: 44 **Notable Neighbor:** 63.135.161.170 shows elevated risk (Score: 60), representing an outlier in this otherwise clean subnet. \--- \## SERVICE & PORT ANALYSIS \- **Open Ports:** None detected \- **Active Services:** None \- **HTTP/HTTPS:** No banner information \- **TLS Certificate:** None \- **Status:** Firewalled / No Services The target appears to be a passive IP with no accessible services, consistent with residential or hosting infrastructure. \--- \## OBSERVATION HISTORY Fifteen signals observed since 2026-07-28. Key temporal patterns: 1. **Subnet Classification:** Consistently "clean" with low inherited risk (1) 2. **Geolocation:** Persistent implausibility in RTT validation 3. **Threat Persistence:** 0 days; not persistently malicious 4. **Ownership Changes:** 0 (stable ownership) 5. **Threat Observation Count:** 0 (no historical malicious activity) No escalation in risk profile detected over observation period. \--- \## RELATIONSHIP MAPPING Relationship graph indicates only network-level connections: \- 3 entries mapping to same network block "IPXO-US-NY-NEW-YORK-CITY-63-135-161-0" \- No associations with external hostnames, organizations, or certificates \--- \## RECOMMENDATIONS & ACTIONS **Security Actions:** No immediate action required. Risk score of 25 falls within acceptable thresholds for standard monitoring. **Firewall Rules:** Not recommended. No active services or threat indicators present. **Monitoring:** Continue baseline observation. No escalation warranted at this time. \--- \## CONCLUSION IP 63.135.161.184 represents a **low-risk, passive infrastructure address** belonging to a clean residential/hosting subnet. The geolocation anomaly requires acknowledgment but does not indicate malicious activity. No threat indicators, blacklist entries, or historical malicious behavior were identified. Standard monitoring is sufficient; no blocking or mitigation measures are recommended. **Risk Rating:** LOW (25/100) **Action Required:** None **Priority:** Routine Monitoring ## Nearby addresses - 63.135.161.1 (https://ipdebrief.com/63.135.161.1) - 63.135.161.5 (https://ipdebrief.com/63.135.161.5) - 63.135.161.8 (https://ipdebrief.com/63.135.161.8) - 63.135.161.10 (https://ipdebrief.com/63.135.161.10) - 63.135.161.11 (https://ipdebrief.com/63.135.161.11) - 63.135.161.14 (https://ipdebrief.com/63.135.161.14) - 63.135.161.15 (https://ipdebrief.com/63.135.161.15) - 63.135.161.18 (https://ipdebrief.com/63.135.161.18) - 63.135.161.20 (https://ipdebrief.com/63.135.161.20) - 63.135.161.21 (https://ipdebrief.com/63.135.161.21) - 63.135.161.27 (https://ipdebrief.com/63.135.161.27) - 63.135.161.28 (https://ipdebrief.com/63.135.161.28) --- Source: IPDebrief, "63.135.161.184 IP intelligence", https://ipdebrief.com/63.135.161.184, updated 2026-10-07. Assessments are probabilistic.