IPDebrief

135.232.92.97

IP Intelligence Dossier
Your IP: 216.73.217.34
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

IP address 135.232.92.97 was identified as a cloud compute host within Microsoft Azure infrastructure (ASN 8075). The asset presented a low-risk reputation score of 25 and operated web services on TCP port 443 with TLS certificates issued by Microsoft Update Secure Server CA. Geolocation data indicated Boydton, Virginia, United States, but route physics measurements contradicted the claimed location, flagging a discrepancy between registered geolocation and network response times.

Threat analysis revealed no known attack campaigns, active attacker status, or enumeration strikes. The address appeared on one DNSBL list out of eight total queries. Behavioral metrics, including honeypot hits and WAF violations, remained at zero. Analysts recommended monitoring the asset due to signal contradictions, though the overall severity was rated low.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇺🇸 United States
RegionVA
CityBoydton
TimezoneAmerica/New_York
Latitude36.67
Longitude-78.39

🏢 Ownership & Registration

OrganizationDivya Quamara
ASNAS8075
Network Namecloud
CIDR Block135.232.0.0/16
RIRARIN
CountryUS
Abuse ContactAvailable via RDAP

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score0% (None)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECNot signed
CAANot configured

☁️ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting — Infrastructure provider without advanced routing
CloudHosting

🔌 Services & Open Ports

PortServiceProtocolBanner
443httpstcp—
Closed Ports22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
CN=*.delivery.mp.microsoft.com, OU=DSP, O=Microsoft, L=Redmond, S=WA, C=US
Issued by CN=Microsoft Update Secure Server CA 2.1, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
Self-signed: No
SANs*.delivery.mp.microsoft.com*.backend.delivery.mp.microsoft.com*.fe3.delivery.mp.microsoft.com*.backend.fe3.delivery.mp.microsoft.com*.fe6.delivery.mp.microsoft.com
Valid From2026-02-03T19:04:22+00:00
Valid Until2027-02-03T19:04:22+00:00
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period365 days
Serial Number330000029C1BAE56DFD6F6F93100000000029C
Thumbprint53EAE898AE17D32AFC3D5FD83C043D758E329A35

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
25%
11
routing
25%
11
services
25%
11
ownership
0%
00
reputation
0%
00
geolocation
0%
00
Overall12%33
Coverage: 3/6 dimensions · Data sufficiency: partial
Data CoherenceMostly Consistent (80%) — 1 contradiction(s)
AttributionLow (35%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid
⚠ Claimed geolocation contradicts RTT physics measurement

📅 Observation Timeline 🔄 Live

First Seen2026-09-20 20:42:02 UTC
Last Seen2026-09-20 20:42:02 UTC
Profile Built2026-09-20 20:57:13 UTC
Data FreshnessLive
Signal Types19
Total Observations19
🔍 19 signal types · 19 observations collected
This report is generated from 19+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.