172.200.194.99
IP INTELLIGENCE BRIEFING
Target: 172.200.194.99/32
---
**OVERVIEW**
IP 172.200.194.99 is classified as Low Risk (Risk Score: 25). The address is assigned to Microsoft Azure (ASN 8075) within the 172.200.0.0/16 cloud infrastructure block. Geolocation data places the IP in Virginia, US. The IP exhibits standard enterprise cloud compute characteristics with no malicious indicators detected.
**OWNERSHIP & INFRASTRUCTURE**
| Attribute | Value |
|---|---|
| ASN | 8075 |
| Organization | Divya Quamara |
| Infrastructure Type | CloudCompute |
| CIDR Block | 172.200.0.0/16 |
| RIR | ARIN |
The IP operates as a single-service host within Microsoft Azure's cloud infrastructure. Routing analysis indicates the address is associated with the 172.200.0.0/13 BGP prefix.
**THREAT ASSESSMENT**
- Blacklist Status: Not listed (0 blacklists)
- Known Attacker: No
- Tor Exit Node: No
- Spam Source: No
- Campaign Association: None detected
- Abuse Confidence Score: Null (insufficient data)
Threat indicators are absent. The IP has not been observed in any known malicious campaigns or threat feeds.
**NETWORK SERVICES**
| Port | Protocol | Service | Status |
|---|---|---|---|
| 22 | TCP | SSH | Open |
Open SSH port (22/SSH) is consistent with typical enterprise/cloud infrastructure deployment. No HTTP/HTTPS services detected.
**SUBNET ANALYSIS (172.200.194.0/24)**
| Metric | Value |
|---|---|
| Subnet Classification | Clean |
| Abuse Density | 0 |
| Threat Siblings | 0 |
| Active Siblings | 1 |
| Neighbor Risk Distribution | All Low |
The /24 subnet contains minimal activity with no observed threats or elevated-risk neighboring addresses.
**OBSERVATION HISTORY**
Historical data (20 observations) indicates consistent classification as Microsoft Azure cloud infrastructure with stable network characteristics. Neighborhood analysis has remained "clean" with 0 abuse density across the observation period. No changes in provider classification or threat posture detected.
**RECOMMENDATION**
Allow Traffic. This IP represents legitimate Microsoft Azure cloud infrastructure with no threat indicators. The open SSH port is typical for enterprise management interfaces. No firewall blocking or monitoring restrictions recommended. If the IP appears in unexpected traffic patterns, verify against internal asset inventory rather than relying on IP reputation alone.
---
Classification: LOW RISK
Analysis Date: 2026-08-12
Data Sources: IPDebrief Intelligence Platform
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Divya Quamara |
| ASN | AS8075 |
| Network Name | cloud |
| CIDR Block | 172.200.0.0/16 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.18 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-27 03:35:44 UTC |
| Last Seen | 2026-08-12 21:13:18 UTC |
| Profile Built | 2026-08-12 21:23:17 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.