# Intelligence Briefing: 74.7.242.172/32
Classification: Low Risk | Infrastructure: Microsoft Azure Cloud | Jurisdiction: United States
## Risk Assessment
The IP address 74.7.242.172/32 presents a low risk profile with an overall risk score of 25. The address is classified as cloud compute infrastructure operated by Microsoft Azure (ASN 8075) within the 74.7.128.0/17 CIDR block. Geolocation data places the asset in Atlanta, Georgia, United States.
## Infrastructure Characteristics
The IP shows no active services or open ports. Network classification indicates cloud hosting infrastructure with firewalled status. DNS analysis revealed one DNSBL listing among eight checked lists. The control plane shows minimal operator score (0.1304) with route stability concerns.
## Historical Observation
Signal observation history contains 19 recorded observations as of 2026-08-05. The IP demonstrates consistent cloud infrastructure classification across the observation window with no evidence of persistent malicious activity. Threat observation count stands at 1, with no campaigns matched or correlated IPs identified.
## Neighborhood Context
The /24 subnet (74.7.242.0/24) contains 21 sibling IPs with a "mostly_clean" classification. Risk distribution shows 17 low-risk addresses and 3 medium-risk addresses, with zero high-risk siblings. The subnet abuse density is reported at 0.1905. Most neighboring IPs maintain risk scores of 25, with minor variations showing scores of 40 at addresses 74.7.242.38 and 74.7.242.145.
## Relationship Mapping
Relationship analysis returned 11 connections, all classified as "Same Network" with target value "cloud." These relationships map to Microsoft Azure cloud network infrastructure.
## Recommended Actions
Based on the low-risk profile, cloud infrastructure classification, and absence of active threat indicators, no immediate blocking or mitigation actions are recommended. The IP should be permitted with standard monitoring protocols. Security teams may optionally whitelist the address for cloud service traffic while maintaining awareness of the minimal DNSBL listing.
Status: No immediate threat indicators. Continue standard monitoring.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Divya Quamara |
| ASN | AS8075 |
| Network Name | cloud |
| CIDR Block | 74.7.128.0/17 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 31% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 24% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-25 06:15:52 UTC |
| Last Seen | 2026-08-12 19:20:41 UTC |
| Profile Built | 2026-08-12 19:47:49 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 21 |
Full dossier details are available via our API.