172.184.213.160📋 Copy

IP INTELLIGENCE BRIEFING

IP Address: 172.184.213.160/32

Classification: Moderate Risk (Score: 50)

Report Date: 2026-06-16

---

**EXECUTIVE SUMMARY**

IP 172.184.213.160 is a Microsoft Azure cloud infrastructure address associated with ASN 8075 (Divya Quamara). The IP demonstrates moderate risk characteristics with no active threat indicators, no blacklist presence, and no known malicious campaigns. The IP is classified as cloud compute infrastructure with firewalled services and no open ports observed.

**OWNERSHIP & GEOLOCATION**

• Organization: Divya Quamara
• ASN: 8075 (Microsoft Azure)
• Location: Redmond, WA, US (ARIN)
• CIDR Block: 172.184.0.0/16
• Infrastructure Type: CloudCompute / Cloud Hosting

**RISK INDICATORS**

**THREAT PROFILE**

• Threat Indicators: None detected
• Known Campaigns: None
• Threat Persistence: 0 days
• Persistent Malicious Activity: False
• Abuse Confidence Score: Not assigned

**NETWORK CONTEXT**

The IP resides in a /24 subnet (172.184.213.0/24) with:

• Abuse Density: 0.4 (40% moderate)
• Subnet Classification: Mostly Clean
• Active Siblings: 3 of 5 total
• Threat Siblings: 2

Neighbor Risk Distribution:

• High Risk: 0
• Medium Risk: 1
• Low Risk: 3

**SERVICES & DNS**

• Open Ports: None (Firewalled)
• DNS Resolution: None (No PTR records)
• Hosted Domains: 0
• Email Authentication: SPF/DMARC not configured
• HTTP Services: None detected

**OBSERVATION HISTORY**

Fourteen observations recorded through 2026-06-16. Signals indicate stable ownership with no recent changes. Geolocation inferences consistently point to US territory with moderate confidence levels. No escalation in threat signals observed over time.

**RELATIONSHIPS**

Three network-level relationships identified, all associated with the "cloud" network designation. No external entity associations detected.

**RECOMMENDED ACTIONS**

Based on risk profile, the following controls are recommended:

Firewall/IPS Rules:

• `iptables -A INPUT -s 172.184.213.160 -j DROP`
• `nft add rule inet filter input ip saddr 172.184.213.160 drop`

WAF Configuration:

• Cloudflare WAF: Block IP with expression `ip.src eq 172.184.213.160`
• AWS WAF: Add IP address 172.184.213.160/32 to blocklist

Notes:

• This is a cloud infrastructure IP with no active services exposed
• Consider risk tolerance before implementing blocking rules
• Monitor for any changes in threat indicators or behavior

**CONCLUSION**

IP 172.184.213.160 presents moderate risk but lacks active threat indicators. The IP is Microsoft Azure cloud infrastructure with firewalled services. While not actively malicious, the moderate risk score and presence of DNSBL listings warrant monitoring. Recommended action is optional blocking if the IP is not legitimately required for business operations.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.