172.215.210.224📋 Copy

## IP Intelligence Briefing: 172.215.210.224/32

Executive Summary

IP 172.215.210.224 is a Microsoft Azure cloud infrastructure address with low-risk classification (risk score: 25). The IP is associated with the "cloud" network under ASN 8075 (Microsoft Azure) and is firewalled with no open services. No active threat indicators, campaigns, or malicious behavior observed.

Technical Profile

• IP Address: 172.215.210.224/32
• Risk Score: 25 (Low Risk)
• Provider: Microsoft Azure (Infrastructure: CloudCompute)
• ASN: 8075
• Organization: Divya Quamara
• Network Name: cloud
• Geolocation: United States, Wyoming (Cheyenne)
• CIDR Block: 172.215.0.0/16
• Ownership RIR: ARIN

Service & Port Analysis

• Open Ports: None detected
• Service Purpose: Firewalled / No Services
• Infrastructure Type: CloudCompute
• Classification: Cloud infrastructure (not CDN, VPN, proxy, or Tor)

Threat Intelligence Findings

• Threat Indicators: None detected
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0
• Threat Feeds: No correlations
• Campaign Associations: None identified
• WAF Violations: 0
• Honeypot Hits: 0

Control Plane & Routing

• BGP Prefix: 172.208.0.0/13
• Route Stability: Not stable (route changes: 0 in 30 days)
• DNSSEC Valid: Yes
• DNSBL Listed: 1 of 8 total lists (operator score: 0.1304 - Minimal)
• IRRP Consistency: Verified
• RPKI State: Not validated
• Operator Label: Minimal

Neighborhood Analysis

• Subnet: 172.215.210.0/24
• Abuse Density: 0
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 0
• Neighbor IP: 172.215.210.116 (Risk Score: 25, Authority Score: 50)

Observation History

• Total Observations: 18 signals
• Most Recent: 2026-06-21
• Historical Risk Trend: Stable low-risk profile
• Signal Types: DNSSEC, control plane, and general signal type 15
• Confidence Range: 0.19–0.70
• Operator Score Consistency: 0.1304 (Minimal)
• Threat Persistence: 0 days
• Ownership Changes: 0

Network Behavior

• Traceroute Hops: 21
• First Hop RTT: 0.1ms
• Last Hop RTT: 67.9ms
• Timed Out Hops: 5
• Transit Networks: Comcast

Recommended Actions

• Firewall Rules: No blocking required (low-risk cloud infrastructure)
• Monitoring: Standard cloud traffic monitoring recommended
• Threat Response: No immediate action required
• Block Status: Not recommended

SOC Analyst Notes

This IP represents legitimate Microsoft Azure cloud infrastructure. The absence of open ports, combined with the cloud classification and lack of threat indicators, confirms normal cloud service operation. The single DNSBL listing appears to be a false positive or routine listing. The neighborhood shows minimal abuse density with no correlated malicious activity. No further investigation or blocking action is warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.