63.135.161.185 is an IPv4 address operated by AS206092 Internet Utilities Europe and Asia Limited (AS206092), geolocated to New York, United States. As of October 7, 2026, IPDebrief rates it Low Risk (20/100); no anonymizing service was detected.
# IP INTELLIGENCE BRIEFING
Target: 63.135.161.185/32
Classification: LOW RISK
Date: 2026-07-28
## EXECUTIVE SUMMARY
The IP address 63.135.161.185 presents a LOW RISK profile with no active threat indicators. This IP belongs to AS206092 (Internet Utilities Europe and Asia Limited) and is associated with the IPXO-US-NY-NEW-YORK-CITY-63-135-161-0 CIDR block. The IP shows minimal service exposure, no blacklist associations, and resides in a subnet with negligible abuse density.
## RISK ASSESSMENT
| Metric | Value |
|---|---|
| Risk Score | 0 |
| Reputation | Low Risk |
| Blacklist Count | 0 |
| Abuse Confidence Score | N/A |
| Threat Indicators | None Detected |
Classification Flags:
- Is Tor Exit: No
- Is Known Attacker: No
- Is Spam Source: No
- Is Hosting/CDN/Vpn: No
- Is Mobile/Residential: Unknown (service purpose: Firewalled / No Services)
## OWNERSHIP & GEOLOCATION
- ASN: 206092 (Internet Utilities Europe and Asia Limited)
- Network Block: 63.135.161.0/24
- Organization: AS206092 Internet Utilities Europe and Asia Limited
- Geolocation: US, New York, New York
- RIR: ARIN
## NETWORK CHARACTERISTICS
- Open Ports: None detected
- DNS Resolution: No PTR records, no forward resolution
- Services: No HTTP/TLS services detected
- Email Auth: No SPF/DMARC records associated
- BGP Prefix: 63.135.161.0/24
- Route Stability: Flagged as unstable (route changes within 30-day window: 0)
## THREAT INTELLIGENCE
- Active Threat Indicators: None
- Campaign Associations: No known campaigns linked
- Historical Threat Persistence: 0 days
- Threat Observation Count: 0
- DNSBL Listings: 0
## NEIGHBORHOOD ANALYSIS (63.135.161.0/24)
- Total Siblings: 45 IPs
- Abuse Density: 0 (Minimal)
- Risk Distribution:
- High Risk: 0
- Medium Risk: 1 (63.135.161.170: Risk Score 60)
- Low Risk: 44
Notable Neighbor: 63.135.161.170 (Risk Score 60) - The only medium-high risk IP in the subnet.
## OBSERVATION HISTORY
Recent Activity (15 observations):
- 2026-07-28 01:06: RTT measurements show 19-30ms, with one observation flagging distance violation (claimed distance 5968km vs minimum possible 119.4ms)
- 2026-07-28 01:04: Port scan detected - no open ports identified
- 2026-07-28 01:05: Traceroute completed (12 hops, 2 timeouts)
Temporal Indicators:
- Ownership Changes: 0
- Threat Persistence Days: 0
- Is Persistently Malicious: No
## RECOMMENDATIONS
Security Actions:
- No immediate blocking recommended based on current risk profile
- Monitor for service emergence (currently firewalled with no open ports)
- No firewall rules or WAF policies suggested by automated analysis
SOC Analyst Notes:
- This IP exhibits characteristics of a residential or small business endpoint
- Zero active threat signals across all threat feeds
- Subnet context is benign with only one notable risk neighbor (63.135.161.170)
- If observed in malicious traffic, investigate correlation with 63.135.161.170
- Historical data shows no escalation of threat activity over time
---
*Intelligence generated from IPDebrief analysis. Data current as of 2026-07-28.*
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | AS206092 Internet Utilities Europe and Asia Limited |
| ASN | AS206092 |
| Network Name | IPXO-US-NY-NEW-YORK-CITY-63-135-161-0 |
| CIDR Block | 63.135.161.0/24 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS206092 |
| Network Prefix | 63.135.161.0/24 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 17% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 12% | 2 | 2 |
| reputation | 8% | 1 | 2 |
| geolocation | 17% | 2 | 3 |
| Overall | 12% | 10 | 13 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 22:24:21 UTC |
| Last Seen | 2026-10-07 08:07:19 UTC |
| Profile Built | 2026-10-07 08:07:57 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 63.135.161.185
Who owns the IP address 63.135.161.185?
63.135.161.185 is registered to AS206092 Internet Utilities Europe and Asia Limited. The address falls within the 63.135.161.0/24 network block. Registration is held at ARIN.
Where is 63.135.161.185 located?
Geolocation data places 63.135.161.185 in New York, New York, United States. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 63.135.161.185 malicious or safe?
63.135.161.185 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.