144.172.94.85📋 Copy

# IP Intelligence Briefing: 144.172.94.85/32

## Executive Summary

IP address 144.172.94.85 presents a moderate risk profile (score: 65) with evidence of DNS blacklist listings. The address is classified as firewalled with no active services. Recent observations indicate the IP is associated with the cloudzy.com domain infrastructure.

## Technical Profile

• Risk Score: 65 (Moderate Risk)
• Control Plane: Origin ASN 14956, BGP prefix 144.172.94.0/24
• Network Classification: Firewalled / No Services Detected
• Infrastructure Type: Not provider, CDN, VPN, proxy, Tor, or hosting
• Route Stability: Route flagged as unstable (isRouteStable: false)

## DNS Analysis

• PTR Hostname: 85.94.172.144.static.cloudzy.com
• Domain Association: cloudzy.com
• Forward Resolution: Confirmed single hostname
• Email Authentication: SPF and DMARC records present
• DNSSEC: Validated (dnssecValid: true)
• CAA Records: Present (5 records)

## Threat Indicators

• DNS Blacklist Listings: 3 listings out of 8 total lists (dnsblListedCount: 3)
• Abuse Confidence Score: Not assigned
• Known Attacker: False
• Tor Exit Node: False
• Spam Source: False
• Campaign Associations: None identified
• Threat Persistence: No persistent malicious activity observed

## Neighborhood Analysis

Subnet: 144.172.94.0/24

• Abuse Density: 0 (0.1667 in recent observations)
• Total Siblings: 6 (including subject IP)
• Active Siblings: 1
• Threat Siblings: 1
• Neighbor Risk Distribution: 0 high, 0 medium, 5 low risk

Sibling IPs:

• 144.172.94.2 (Risk: 20, Authority: 50)
• 144.172.94.33 (Risk: 0, Authority: 50)
• 144.172.94.169 (Risk: 20, Authority: 50)
• 144.172.94.186 (Risk: 0, Authority: 50)
• 144.172.94.226 (Risk: 25, Authority: 50)

## Observation History

Recent signal observations (11 total records):

• Abuse Density: 0.1667 (classification: mostly_clean)
• Inherited Risk: 2
• Operator Score: 0.2174 (Minimal)
• DNS Listings: 3 of 8 lists flagged with high severity
• Domain Records: 5 CAA records associated with cloudzy.com

## Relationship Graph

• DNS Association: 85.94.172.144.static.cloudzy.com (single relationship)
• No Additional: No related subnets, organizations, or certificates identified

## Recommended Actions

Based on the moderate risk profile and DNS blacklist presence:

1. Monitor: Implement enhanced monitoring for outbound connections to this IP

2. Block Consideration: Evaluate blocking if traffic patterns indicate compromise

3. Allowlist Exception: Cloudzy.com infrastructure may require allowlist exception for legitimate cloud services

4. Network Traffic Analysis: Review logs for any anomalous activity patterns

## Risk Assessment

The IP is classified as moderate risk primarily due to DNS blacklist listings. The address is associated with legitimate cloud infrastructure (cloudzy.com) but shows evidence of being listed on security blacklists. The firewalled status with no active services suggests this may be a residential or static cloud endpoint rather than an actively exploited server.

Threat Level: MODERATE

Recommendation: Monitor and investigate traffic patterns; no immediate blocking required unless suspicious activity observed.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.