IPDebrief

104.44.54.254

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON πŸ”§ Full Actions API
πŸ€– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

The IP address 104.44.54.254 was identified as belonging to Microsoft Corporation (ASN 8075) and was classified as CloudCompute infrastructure within the 104.40.0.0/13 CIDR block. The address exhibited a Low Risk reputation score of 25. Geolocation data indicated a location in Madison, Wisconsin, United States, though RTT measurements recorded a minimum possible distance of 7625.7 km, contradicting the claimed region. Network scans showed the host as a firewall with no open ports or active services. While the surrounding subnet was categorized as mostly clean, the host was tagged as a suspicious host without specific classification. Observations were recorded between 2026-08-29 and 2026-09-19. Analysis recommended monitoring the address due to signal contradictions, noting that specific threat indicators or campaigns were not identified.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

CountryπŸ‡ΊπŸ‡Έ United States
RegionWI
CityMadison
TimezoneAmerica/Chicago
Latitude43.14
Longitude-89.34

🏒 Ownership & Registration

OrganizationMicrosoft Corporation
ASNAS8075
Network NameMSFT
CIDR Block104.40.0.0/13
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTRbe1011.rwa02.dm4.ntwk.msn.net
Forward ConfirmedNo β€” PTR hostname does not resolve back to this IP (weak signal)
Forward Hostnamesbe1011.rwa02.dm4.ntwk.msn.net

πŸ” DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECNot signed
CAAPresent

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeFirewalled / No Services
Network TierHosting β€” Infrastructure provider without advanced routing
CloudHosting

πŸ”Œ Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Serverβ€”
HTTP Titleβ€”

πŸ” TLS Certificate

πŸ”’
No certificate
Issued by β€”
N/A
SANsNone
Valid Fromβ€”
Valid Untilβ€”

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
33%
24
routing
13%
11
services
19%
22
ownership
27%
23
reputation
13%
12
geolocation
19%
22
Overall21%1014
Coverage: 6/6 dimensions Β· Data sufficiency: sufficient
Data CoherenceMostly Consistent (80%) β€” 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

πŸ“… Observation Timeline πŸ”„ Live

First Seen2026-08-29 01:58:27 UTC
Last Seen2026-09-19 05:27:18 UTC
Profile Built2026-09-19 05:44:34 UTC
Data FreshnessLive
Signal Types24
Total Observations32
πŸ” 24 signal types Β· 32 observations collected
This report is generated from 24+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API πŸ”§ Actions API πŸ“§ Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata β€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.