135.224.52.242
IP 135.224.52.242 was assessed as a High Risk endpoint with a risk score of 70. The address operated within Microsoft Azure cloud infrastructure (ASN 8075) and served web traffic on ports 80 and 443. TLS certificate analysis identified the domain as config.office.com under Microsoft Corporation. Despite the hosting context, the endpoint was flagged as a Suspicious Host with a critical severity recommendation to block. Data contradictions existed regarding geolocation, where the reported Chicago, IL origin conflicted with RTT physics measurements for the observed distance. The neighborhood analysis showed 25% abuse density among siblings. The endpoint responded with an HTTP 403 status code.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Divya Quamara |
| ASN | AS8075 |
| Network Name | cloud |
| CIDR Block | 135.224.0.0/16 |
| RIR | ARIN |
| Country | US |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Present |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Microsoft-Azure-Application-Gateway/v2 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | consent.config.office.com*.config.office.com*.consent.config.office.comconfig.office.com |
| Valid From | 2026-08-27T06:34:51+00:00 |
| Valid Until | 2027-02-23T06:34:51+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384RSA |
| Validity Period | 180 days |
| Serial Number | 4300DAEA759DE48943DA5B23C2000000DAEA75 |
| Thumbprint | 8DF8563F89A83EBA1546DA195E1FF804C03C2177 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 33% | 2 | 4 |
| Overall | 26% | 10 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 13:26:04 UTC |
| Last Seen | 2026-09-23 23:20:18 UTC |
| Profile Built | 2026-09-23 23:32:51 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 32 |
Full dossier details are available via our API.