74.248.129.192📋 Copy

# IP INTELLIGENCE BRIEFING

Target: 74.248.129.192/32

Classification: LOW RISK – Cloud Infrastructure

Date: Current Analysis

---

## Executive Summary

Target IP 74.248.129.192 is a Microsoft Azure cloud compute instance located in Warsaw, Poland. Risk assessment indicates low threat activity with a composite risk score of 25. The IP hosts a single SSH service (port 22) and shows no known malicious indicators, blacklist presence, or association with active threat campaigns.

---

## Ownership & Network Context

• ASN: 8075
• Organization: BHM ADSL CBB
• Network Block: 74.248.128.0/18 (BLS-74-248-128-0-1003020949)
• Provider: Microsoft Azure (CloudCompute infrastructure)
• Registration: ARIN RIR
• Control Plane: BGP prefix 74.248.0.0/15; route stability flag set to false

---

## Geolocation

• Country: Poland (PL)
• City: Warsaw
• Coordinates: 52.23°N, 21.01°E
• Timezone: Europe/Warsaw
• Geolocation Confidence: 80% (provider-region method)
• Note: Geo validation indicates ICMP blocked; distance calculation unable to validate

---

## Threat Indicators

• Abuse Confidence Score: None reported
• Blacklist Status: 0 entries
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No
• Known Campaigns: None identified
• Threat Feeds: None correlated

---

## Network Services

• Open Ports: TCP/22 (SSH)
• SSH Banner: SSH-2.0-OpenSSH_8.0
• TLS Certificate: None
• HTTP Service: None detected
• DNS Resolution: No forward resolution; no hosted domains
• Email Authentication: SPF/DMARC not configured

---

## Control Plane & Reputation

• Operator Score: 0.1304 (Minimal)
• DNSBL Listed: 1 of 8 total lists
• DNSSEC: Valid
• Route Changes (30d): 0
• Threat Persistence Days: 0
• Threat Observation Count: 1

---

## Neighborhood Analysis (74.248.129.0/24)

• Abuse Density: 1
• Classification: Mostly clean
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 2
• Neighboring IP: 74.248.129.59 (Risk Score: 25, Authority Score: 50)

---

## Historical Observation

• Total Observations: 19 signals
• Latest Signal: 2026-06-23T21:08:25+00:00 (Geolocation, confidence 80%)
• Previous Signal: 2026-06-19T07:43:40+00:00 (Service scan, confidence 90%)
• Risk Trend: No significant escalation; stability score 0

---

## Recommended Actions

No specific firewall rules or blocking recommendations generated. The IP presents low-risk characteristics consistent with legitimate cloud infrastructure. SOC analysts may:

• Monitor for any new service openings or threat indicator emergence
• Treat as low-priority if flagged for investigation
• No immediate blocking action advised

---

END OF BRIEFING

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.