# 172.184.231.74 — IP Intelligence Summary

172.184.231.74 is an IPv4 address operated by Divya Quamara (AS8075), geolocated to San Francisco, United States. It belongs to datacenter or hosting infrastructure. As of November 4, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/172.184.231.74
- Last updated: 2026-11-04

## Ownership

- Organization: Divya Quamara
- Network name: cloud
- Allocated block: 172.184.0.0/16
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: San Francisco
- Region: CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: High Risk (70/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

The IP address 172.184.231.74 was classified as High Risk with a risk score of 70. Network analysis identified the address as Microsoft Azure infrastructure (ASN 8075) within the 172.184.0.0/16 block. The endpoint served web traffic on ports 80 and 443, reporting a server banner of Microsoft-IIS/10.0.

Threat intelligence correlated the address with campaign infrastructure, indicating a high likelihood of involvement in coordinated attacks alongside 11 other correlated IPs. The profile flagged the address as campaign infrastructure with a critical severity recommendation. Geolocation data presented a contradiction between the claimed San Francisco location and RTT physics measurements, which indicated a distance of 8860 km.

The address lacked DNS hygiene, showing no SPF, DMARC, or DNSSEC records. Despite a low overall confidence score of 0.2417, the analysis recommended blocking the address due to the high risk score and strong threat evidence.

## Nearby addresses

- 172.184.231.67 (https://ipdebrief.com/172.184.231.67)
- 172.184.231.68 (https://ipdebrief.com/172.184.231.68)
- 172.184.231.69 (https://ipdebrief.com/172.184.231.69)
- 172.184.231.70 (https://ipdebrief.com/172.184.231.70)
- 172.184.231.71 (https://ipdebrief.com/172.184.231.71)
- 172.184.231.73 (https://ipdebrief.com/172.184.231.73)
- 172.184.231.75 (https://ipdebrief.com/172.184.231.75)
- 172.184.231.76 (https://ipdebrief.com/172.184.231.76)
- 172.184.231.77 (https://ipdebrief.com/172.184.231.77)

## Addresses sharing infrastructure

- 128.85.113.131 — Same TLS certificate (https://ipdebrief.com/128.85.113.131)
- 128.85.113.132 — Same TLS certificate (https://ipdebrief.com/128.85.113.132)
- 128.85.113.133 — Same TLS certificate (https://ipdebrief.com/128.85.113.133)
- 128.85.113.134 — Same TLS certificate (https://ipdebrief.com/128.85.113.134)
- 128.85.113.136 — Same TLS certificate (https://ipdebrief.com/128.85.113.136)
- 128.85.113.137 — Same TLS certificate (https://ipdebrief.com/128.85.113.137)
- 128.85.113.138 — Same TLS certificate (https://ipdebrief.com/128.85.113.138)
- 128.85.113.139 — Same TLS certificate (https://ipdebrief.com/128.85.113.139)
- 128.85.113.140 — Same TLS certificate (https://ipdebrief.com/128.85.113.140)
- 130.213.27.176 — Same TLS certificate (https://ipdebrief.com/130.213.27.176)
- 130.213.27.177 — Same TLS certificate (https://ipdebrief.com/130.213.27.177)
- 130.213.27.178 — Same TLS certificate (https://ipdebrief.com/130.213.27.178)

---

Source: IPDebrief, "172.184.231.74 IP intelligence", https://ipdebrief.com/172.184.231.74, updated 2026-11-04. Assessments are probabilistic.
