IPDebrief

74.225.203.206

IP Intelligence Dossier
Your IP: 216.73.217.135
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 74.225.203.206

## Executive Summary

The IP address 74.225.203.206 was classified as Low Risk with an overall risk score of 25. The address is associated with Microsoft Azure cloud infrastructure and shows no active threat indicators, blacklisting, or malicious campaign affiliations.

## Infrastructure Profile

The IP resolved to Microsoft Azure (ASN 8075) under organization MIA ADSL EEUA within CIDR block 74.225.0.0/16. Geolocation data placed the address in Pune, Maharashtra, India (latitude 18.58, longitude 73.92) with a 150km accuracy radius. The infrastructure is classified as CloudCompute with hosting enabled, and the service purpose is marked as "Firewalled / No Services."

## Threat Assessment

No threat indicators were identified during analysis. The IP is not a Tor exit node, known attacker, or spam source. Blacklist count was zero, and no known campaigns were correlated. DNS analysis revealed no hosted domains, no email authentication records (SPF or DMARC), and forward resolution was not confirmed.

## Control Plane and Routing

BGP routing showed origin ASN 8075 with path 49788 8075. The route is stable with zero changes in the past 30 days and is not part of MOAS. DNSSEC validation is valid. The operator score was 0.3478 (Basic operator classification). DNSBL listing showed 1 match across 8 total lists.

## Historical Observations

Analysis of 20 historical observations revealed consistent cloud infrastructure classification as Microsoft Azure from June 2026. Geographic signals consistently inferred Pune, India. Operator score signals from June 15, 2026, maintained the Basic classification. The IP is not persistently malicious with zero threat persistence days recorded.

## Neighborhood Analysis

The /24 subnet 74.225.203.206/24 shows an abuse density of 1 with a classification of mostly_clean. The subnet contains 1 total sibling IP with 1 active sibling and 1 threat sibling. Inherited risk score was 2.

## Relationships

Relationship mapping identified 13 relationships, all classified as "Same Network" type pointing to network BLS-74-225-0-0-1003020948.

## Recommendations

No specific security actions or firewall rules were generated. The IP presents a low-risk profile consistent with legitimate cloud infrastructure usage. Routine monitoring is recommended, but immediate blocking is not advised based on current threat intelligence.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ฎ๐Ÿ‡ณ India
RegionMH
CityPune
TimezoneAsia/Kolkata
Latitude18.58
Longitude73.92

๐Ÿข Ownership & Registration

OrganizationMIA ADSL EEUA
ASNAS8075
Network NameBLS-74-225-0-0-1003020948
CIDR Block74.225.0.0/16
RIRARIN
CountryUnited States
Abuse Contactโ€”

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”

๐Ÿ” TLS Certificate

๐Ÿ”’
No certificate
Issued by โ€”
N/A
SANsNone
Valid Fromโ€”
Valid Untilโ€”

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
26%
24
routing
17%
23
services
12%
22
ownership
15%
22
reputation
28%
13
geolocation
33%
23
Overall22%1117
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-05-21 21:01:18 UTC
Last Seen2026-06-28 16:53:01 UTC
Profile Built2026-06-29 10:58:02 UTC
Data FreshnessLive
Signal Types21
Total Observations24
๐Ÿ” 21 signal types ยท 24 observations collected
This report is generated from 21+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.