172.202.26.222📋 Copy

IP Intelligence Briefing: 172.202.26.222/32

Classification: Microsoft Azure Cloud Infrastructure (Moderate Risk)

IP Address: 172.202.26.222/32

ASN: 8075 (Microsoft Azure)

Geolocation: United States, Iowa, Des Moines (41.6°N, 93.61°W)

Network Role: CloudCompute, Single-Service Host

Risk Assessment:

The IP address carries a moderate risk score of 40. The address is registered to Divya Quamara under the cloud netname (172.202.0.0/16) within the ARIN RIR. The infrastructure type is classified as CloudCompute with Microsoft Azure as the provider. The IP is listed on 2 of 8 DNSBL lists with no specific threat indicators identified in the threat profile.

Technical Observations:

• Open port 22 (SSH) detected with OpenSSH 8.9p1 Ubuntu-3ubuntu0.16 banner
• No TLS certificate, HTTP title, or active web services observed
• Forward DNS resolution not confirmed; no PTR hostnames resolved
• DNSSEC validation confirmed as valid
• ICMP validation blocked; minimum possible RTT: 141.3ms

Historical Activity:

22 observation records collected between August 2026. The most recent activity occurred on 2026-08-12, showing signal types including DNS listings, operator scoring, and network classification. No persistent malicious activity or threat campaigns were detected over the observation period.

Relationships:

11 relationships identified, all pointing to the "cloud" network (172.202.0.0/16), indicating the IP is part of Microsoft Azure's public cloud infrastructure.

Neighborhood Analysis:

The /24 subnet (172.202.26.0/24) shows 0% abuse density with a "mostly_clean" classification. Two sibling IPs were observed:

• 172.202.26.56: Risk Score 25, Authority Score 50
• 172.202.26.119: Risk Score 25, Authority Score 50

No high or medium-risk neighbors detected in the immediate subnet.

Recommended Actions:

The IP address has triggered firewall rule recommendations across multiple platforms. Control plane data shows route instability (isRouteStable=false) and minimal operator score (0.1304).

Summary:

IP 172.202.26.222 is a Microsoft Azure cloud infrastructure address with moderate risk classification. While not a known attacker or spam source, the presence on DNSBL lists and SSH service exposure warrants monitoring. The subnet environment shows low abuse density, and no correlated malicious activity was detected. Recommend monitoring for any changes in service patterns or blacklist status.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.