172.184.211.23📋 Copy

## IPDEBRIEF THREAT INTELLIGENCE BRIEFING

Target IP: 172.184.211.23/32

Classification: LOW RISK — Cloud Infrastructure

---

EXECUTIVE SUMMARY

IP 172.184.211.23 is a Microsoft Azure cloud compute endpoint with a risk score of 25 (LOW RISK). The IP operates within the 172.184.0.0/16 block under organizational ownership of Divya Quamara (AS8075). No active threat indicators or malicious behavior have been observed. The IP is currently firewalled with no services exposed.

---

PROFILE DATA

Ownership & Infrastructure:

• Organization: Divya Quamara
• ASN: AS8075 (Microsoft Azure)
• Network Block: 172.184.0.0/16
• RIR: ARIN
• Registration: Network block registered in ARIN database

Geolocation:

• Country: United States (US)
• Region: California (CA)
• City: San Francisco
• Coordinates: 37.78°N, -122.42°W
• Accuracy Radius: 150km

Network Role:

• Infrastructure Type: CloudCompute
• Provider: Microsoft Azure
• Cloud Endpoint: Yes
• Hosting: Yes
• CDN/VPN/Proxy/Tor: No

---

THREAT ASSESSMENT

Risk Indicators:

• Overall Risk Score: 25 (LOW RISK)
• Abuse Confidence Score: Not applicable
• Blacklist Count: 0
• DNSBL Listings: 1 of 8 lists
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

Services & Ports:

• Open Ports: None detected
• TLS Certificate: None
• HTTP Banner: None
• Server Classification: Firewalled / No Services

---

OBSERVATION HISTORY (17 Total Signals)

Recent activity concentrated on 2026-07-22. Key signals include:

1. Infrastructure Classification (Confidence: 0.90) — Confirmed Microsoft Azure cloud compute infrastructure.

2. Geolocation (Confidence: 0.56) — Consistent San Francisco, CA placement via multi-signal inference.

3. DNSSEC Status (Confidence: 0.30) — DNSSEC validation enabled.

4. Reputation Signals — Operator score: 0.1304 (Minimal risk).

5. Anomalous Signal — One AlienVault OTX signal reported France-based geolocation (likely false positive; primary consensus remains US/San Francisco).

No persistent malicious behavior or threat persistence days recorded.

---

NETWORK RELATIONSHIPS

Related Entities:

• 6 relationship entries identified
• All relationships classified as "Same Network" targeting network label "cloud"
• No hostname, organization, or certificate associations detected

---

NEIGHBORHOOD ANALYSIS (172.184.211.0/24)

Subnet Profile:

• Abuse Density: 0.5 (Moderate)
• Total Sibling IPs: 8
• Active Siblings: 4
• Threat Siblings: 4

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 0
• Low Risk: 9

Notable Neighbors:

• 172.184.211.26 (Risk: 25)
• 172.184.211.38 (Risk: 25)
• 172.184.211.75 (Risk: 0)
• 172.184.211.83 (Risk: 25)
• 172.184.211.92 (Risk: 25)
• 172.184.211.112 (Risk: 0)
• 172.184.211.145 (Risk: 25)
• 172.184.211.147 (Risk: 25)
• 172.184.211.242 (Risk: 0)

Neighborhood exhibits moderate abuse density with no high-risk neighbors identified.

---

CONTROL PLANE

• Origin ASN: AS8075
• BGP Prefix: 172.160.0.0/11
• Route Stability: False
• RPKI State: Not reported
• IRR Consistency: Not reported
• Route Changes (30d): 0
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 lists

---

SOC ACTIONS & RECOMMENDATIONS

Recommended Actions:

• No immediate action required (Risk Score: 25, Low Risk)
• No firewall rules recommended
• No blocking or rate-limiting advised

Monitoring Guidance:

• Continue standard monitoring for cloud infrastructure
• No threat indicators present
• No behavioral anomalies detected

Additional Notes:

• IP is operational within Azure cloud environment
• No open services detected (expected for cloud backend infrastructure)
• Single DNSBL listing warrants periodic review but does not indicate active threat

---

Report Generated: Current

Data Sources: IPDebrief Intelligence Platform

Classification: DEFENSIVE SECURITY INTELLIGENCE

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.