74.249.157.90📋 Copy

## IP Intelligence Briefing: 74.249.157.90/32

Classification: Low Risk / Cloud Infrastructure

Report Date: Based on available intelligence

Analysis Period: Recent observations (June 2026)

---

Executive Summary

IP address 74.249.157.90/32 is a Microsoft Corporation cloud compute endpoint classified as low risk with a risk score of 25. The IP operates within the Microsoft Azure infrastructure and is associated with the 74.248.0.0/15 CIDR block (AS8075). No active threat indicators were identified, and the IP exhibits characteristics of legitimate cloud infrastructure rather than malicious activity.

---

Ownership and Infrastructure

• Organization: Microsoft Corporation
• ASN: 8075 (MSFT)
• Network Name: MSFT
• CIDR Block: 74.248.0.0/15
• Infrastructure Type: Cloud Compute
• Cloud Provider: Microsoft Azure
• Registration RIR: ARIN
• Geolocation: Des Moines, Iowa, United States (Region: IA)

The IP is hosted on Microsoft's enterprise cloud infrastructure with BGP routing through AS49788 and AS8075. Route stability is confirmed with zero route changes over the past 30 days and stable ownership history.

---

Security Posture

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Blacklist Count: 0 (active listings)
• DNSBL Listed: 1 out of 8 total DNSBL lists checked

The IP shows no active threat indicators and no association with known threat campaigns. Historical analysis confirms the IP is not persistently malicious with zero threat persistence days recorded.

---

Network Context

Subnet Analysis: 74.249.157.90/24

• Abuse Density: 1 (Low)
• Classification: Mostly Clean
• Inherited Risk: 2 (Low)
• Total Siblings: 1
• Active Siblings: 0
• Threat Siblings: 1

The /24 subnet demonstrates minimal abuse density with a "mostly clean" classification. One threat sibling was identified in historical records, though no active threats are currently associated with the immediate neighborhood.

Neighbor Analysis: Zero neighboring IPs were discovered in the immediate range, indicating the IP operates as an isolated endpoint rather than part of a dense IP block.

---

Technical Configuration

• Open Ports: None detected
• DNS Resolution: No PTR records available
• Forward Resolution: Not confirmed
• Email Authentication: SPF and DMARC not configured
• TLS Certificate: None detected
• HTTP Service: No services responding
• HTTP Headers: No HSTS, CSP, or HTTP/2 headers detected

The IP shows "Firewalled / No Services" characteristics with no open ports or active services. This is consistent with Microsoft Azure's security-by-default posture where cloud compute instances are not exposed by default.

---

Historical Observations

Eighteen total observations were recorded. Key temporal signals include:

• 2026-06-20: DNSBL listing checks (8 total lists, 0 active listings)
• 2026-06-20: Geolocation inference confirmed (Des Moines, IA, US)
• 2026-06-15: BGP prefix stability confirmed (74.248.0.0/15)
• 2026-06-15: AS Path routing verified (49788 8075)
• 2026-06-15: Subnet classification verified (mostly_clean)

Ownership has remained stable with zero changes recorded. The IP demonstrates consistent behavior with no escalation in risk profile over the observation period.

---

Relationship Graph

Eleven relationship records were identified, all indicating "Same Network" associations with Microsoft Corporation (MSFT). No external entity relationships (hostnames, organizations, certificates) were discovered beyond the Microsoft network infrastructure.

---

Recommendations

Based on the risk profile and infrastructure type:

1. No Blocking Required: The IP is Microsoft cloud infrastructure with low risk characteristics. No firewall blocking is recommended.

2. Allow List Consideration: The IP may be added to an allow list if legitimate Microsoft traffic is expected from this range.

3. Monitor for Changes: While current risk is low, monitor for any changes in service exposure or threat indicators.

4. Geolocation Context: Traffic from Des Moines, IA on AS8075 is expected for Microsoft Azure operations in that region.

---

Status: Clear for normal operation. No immediate security action required.

Confidence Level: High — Data is consistent across multiple verification sources.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.