173.208.128.130
The IP address 173.208.128.130 was associated with DemandIR Media Works PVT.LTD. under ASN 32097 within the 173.208.128.128/29 block. The asset presented a Low Risk reputation with a risk score of 25. No open ports or active services were detected on the address. DNS records resolved to po-99.edge-1.107.swift.mci.us.as32097.net, but forward resolution was unconfirmed.
Behavioral analysis indicated no honeypot hits, enumeration strikes, or WAF violations. The network neighborhood remained classified as clean with zero abuse density. However, geolocation data contradicted RTT physics measurements, and signal contradictions were present in the overall profile. No specific threat indicators, campaigns, or known attacker signatures were identified.
The address was classified as a Suspicious Host with low severity. Security teams were advised to monitor the asset for changes due to signal inconsistencies and insufficient data to classify intent.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | DemandIR Media Works PVT.LTD. |
| ASN | AS32097 |
| Network Name | DS-173-208-128-129-135 |
| CIDR Block | 173.208.128.128/29 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR | po-99.edge-1.107.swift.mci.us.as32097.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | po-99.edge-1.107.swift.mci.us.as32097.net |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Unknown — Insufficient routing data to classify |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 8 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 27% | 1 | 7 |
| geolocation | 38% | 2 | 5 |
| Overall | 27% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-29 01:32:58 UTC |
| Last Seen | 2026-09-20 05:27:38 UTC |
| Profile Built | 2026-09-23 02:17:02 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 38 |
Full dossier details are available via our API.