IPDebrief

74.7.242.172

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# Intelligence Briefing: 74.7.242.172/32

Classification: Low Risk | Infrastructure: Microsoft Azure Cloud | Jurisdiction: United States

## Risk Assessment

The IP address 74.7.242.172/32 presents a low risk profile with an overall risk score of 25. The address is classified as cloud compute infrastructure operated by Microsoft Azure (ASN 8075) within the 74.7.128.0/17 CIDR block. Geolocation data places the asset in Atlanta, Georgia, United States.

## Infrastructure Characteristics

The IP shows no active services or open ports. Network classification indicates cloud hosting infrastructure with firewalled status. DNS analysis revealed one DNSBL listing among eight checked lists. The control plane shows minimal operator score (0.1304) with route stability concerns.

## Historical Observation

Signal observation history contains 19 recorded observations as of 2026-08-05. The IP demonstrates consistent cloud infrastructure classification across the observation window with no evidence of persistent malicious activity. Threat observation count stands at 1, with no campaigns matched or correlated IPs identified.

## Neighborhood Context

The /24 subnet (74.7.242.0/24) contains 21 sibling IPs with a "mostly_clean" classification. Risk distribution shows 17 low-risk addresses and 3 medium-risk addresses, with zero high-risk siblings. The subnet abuse density is reported at 0.1905. Most neighboring IPs maintain risk scores of 25, with minor variations showing scores of 40 at addresses 74.7.242.38 and 74.7.242.145.

## Relationship Mapping

Relationship analysis returned 11 connections, all classified as "Same Network" with target value "cloud." These relationships map to Microsoft Azure cloud network infrastructure.

## Recommended Actions

Based on the low-risk profile, cloud infrastructure classification, and absence of active threat indicators, no immediate blocking or mitigation actions are recommended. The IP should be permitted with standard monitoring protocols. Security teams may optionally whitelist the address for cloud service traffic while maintaining awareness of the minimal DNSBL listing.

Status: No immediate threat indicators. Continue standard monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionGeorgia
CityAtlanta
Timezoneβ€”
Latitude33.75
Longitude-84.39

🏒 Ownership & Registration

OrganizationDivya Quamara
ASNAS8075
Network Namecloud
CIDR Block74.7.128.0/17
RIRARIN
CountryUS
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)

πŸ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
31%
24
routing
13%
11
services
19%
22
ownership
27%
23
reputation
26%
13
geolocation
30%
23
Overall24%1016
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-07-25 06:15:52 UTC
Last Seen2026-08-12 19:20:41 UTC
Profile Built2026-08-12 19:47:49 UTC
Data FreshnessLive
Signal Types19
Total Observations21
πŸ” 19 signal types Β· 21 observations collected
This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.