Azure-docs: Azure Qualys IPs

[abhishakemitra]

The IPs mentioned in this section of Azure Qualys Documentation list the below IPs to be whitelisted:

64.39.104.113
154.59.121.74

When I looked up the second IP, it mentions that is registerd to Cogent, an ISP in USA. Why would Qualys need to be whitelisted to an ISP when the first IP is a dedicated Qualys IP? See IP look up results in this link

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: 747a2c52-c59c-dedc-9c72-6b6352ea2cab
• Version Independent ID: 07e64d3e-26da-be39-de53-6e259c90545f
• Content: Built-in vulnerability scanner in Azure Security Center
• Content Source: articles/security-center/built-in-vulnerability-assessment.md
• Service: security-center
• GitHub Login: @memildin
• Microsoft Alias: memildin

[MarileeTurscak-MSFT]

@abhishakemitra
Thanks for your feedback! We will investigate and update as appropriate.

[SaurabhSharma-MSFT]

@abhishakemitra Where do you see this information that this IP is registered to Cogent. I have checked it publicly and I see this owned by Qualys.

[abhishakemitra]

@SaurabhSharma-MSFT please see this link and screenshot

https://www.whois.com/whois/154.59.121.74

[SaurabhSharma-MSFT]

@abhishakemitra thanks for sharing this.
@memildin can you please help here.

[abhishakemitra]

@memildin did you get a chance to look into this?

[memildin]

@SaurabhSharma-MSFT @abhishakemitra and @MarileeTurscak-MSFT - I'm looking into this with the product team and will report back ASAP.

[memildin]

I'm not sure we have much that we can reply with here.
It's not unusual for companies to use ISPs. In this case Qualys has two IP addresses that they're using for this purpose and for one, the name of their ISP appears on the public lookup pages.
@abhishakemitra, do you have a specific concern/query about Cogent Communications?

[memildin]

please-close

[abhishakemitra]

As Azure themselves are prescribing Cogent IP to be whitelisted, there should be some formal agreement that this IP is static to Qualys only. Otherwise the risk increases significantly if the IP is dunamic and some other customer would gain access.

Is there any way this forma agreement can be shared?

[abhishakemitra]

@memildin @PRMerger6

[memildin]

We're discussing this with Qualys. If the conversations result in customer-facing information pertinent to this page, it'll be added.
Thanks for your feedback!

please-close

[abhishakemitra]

Please keep me updated on the outcome of conversations