IPDebrief

20.216.189.83

IP Intelligence Dossier
Your IP: 216.73.216.5
{ } JSON ๐Ÿ”ง Full Actions API
๐Ÿค– Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 20.216.189.83/32

Classification: Low Risk / Cloud Infrastructure

Date: 2026-08-12

Analyst: IPDebrief Intelligence

---

## Executive Summary

IP address 20.216.189.83 is identified as a Microsoft Azure cloud compute resource with a low-risk profile (risk score: 25). No active threat indicators or malicious activity detected. Infrastructure is associated with Microsoft Corporation (ASN 8075) and hosts web services for ADISTA France (adista.fr). No security action required at this time.

---

## Technical Profile

AttributeValue
**IP Address**20.216.189.83/32
**Risk Score**25 (Low)
**Organization**Microsoft Corporation
**ASN**8075 (MSFT)
**Location**Paris, Île-de-France, France (FR)
**Infrastructure Type**Cloud Compute (Microsoft Azure)
**Network Block**20.192.0.0/10

---

## Network Services

- TCP/80 (HTTP)

- TCP/443 (HTTPS)

- TCP/22 (SSH - OpenSSH 7.6p1)

- Issuer: Sectigo RSA Organization Validation Secure Server CA

- Subject: CN=*.adista.fr, O=ADISTA

- SANs: *.adista.fr, adista.fr

---

## Threat Assessment

Threat Indicators: None detected

Blacklist Status: Not listed on any threat feeds

Known Campaigns: None associated

Tor Exit Node: No

Proxy Service: No

The IP shows no evidence of malicious activity. Risk breakdown indicates minimal operator score (0.1304) with no threat persistence observed.

---

## Geolocation Validation

---

## Neighborhood Analysis

No neighboring IPs within the /24 subnet show abuse indicators.

---

## Historical Observations

23 observations tracked. Recent activity shows:

---

## Relationship Graph

All identified relationships link to Microsoft (MSFT) network infrastructure. No external entities or suspicious associations detected.

---

## Recommended Actions

No immediate action required. IP is classified as legitimate cloud infrastructure with low-risk profile.

Monitoring Recommendation: Continue passive monitoring. If unexpected traffic patterns or reputation changes are observed, re-evaluate against threat indicators.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

๐ŸŒ Geolocation

Country๐Ÿ‡ซ๐Ÿ‡ท France
RegionMeurthe-et-Moselle
CityParis
TimezoneEurope/Paris
Latitude48.86
Longitude2.35

๐Ÿข Ownership & Registration

OrganizationMicrosoft Corporation
ASNAS8075
Network NameMSFT
CIDR Block20.192.0.0/10
RIRARIN
CountryUnited States
Abuse ContactAvailable via RDAP

๐ŸŒ DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo โ€” PTR hostname does not resolve back to this IP (weak signal)

๐Ÿ” DNS Hygiene

Hygiene Score60% (Good)
SPFPresent
DMARCPresent
FCrDNSNot verified
DNSSECValid
CAANot configured

โ˜๏ธ Network Classification

InfrastructureInfrastructure / Datacenter
Service PurposeWeb Server
Network TierHosting โ€” Infrastructure provider without advanced routing
CloudHosting

๐Ÿ”Œ Services & Open Ports

PortServiceProtocolBanner
80httptcpโ€”
443httpstcpโ€”
22sshtcp
Closed Ports25, 3389, 8080, 8443 (3 open / 7 scanned)
Serverโ€”
HTTP Titleโ€”
SSH VersionSSH-2.0-OpenSSH_7.6p1

๐Ÿ” TLS Certificate

An expired certificate for CN=*.adista.fr, O=ADISTA, S=Meurthe-et-Moselle, C=FR was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.
๐Ÿ”’
CN=*.adista.fr, O=ADISTA, S=Meurthe-et-Moselle, C=FR
Issued by CN=Sectigo RSA Organization Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
Self-signed: No
SANs*.adista.fradista.fr
Valid From2023-10-04T00:00:00+00:00
Valid Until2024-10-23T23:59:59+00:00 (expired)
TLS ProtocolTls13
Cipher SuiteTLS_AES_256_GCM_SHA384
Signature Algorithmsha256RSA
Validity Period385 days
Serial Number008350389E5DC8091B801F067C3DAA12B0
ThumbprintAA8FC4F8185D7461EC996FD5D88CE02B946C41DB

๐ŸŽฏ Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
30%
23
routing
13%
11
services
35%
24
ownership
27%
23
reputation
17%
12
geolocation
27%
23
Overall25%1016
Coverage: 6/6 dimensions ยท Data sufficiency: sufficient
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

๐Ÿ“… Observation Timeline ๐Ÿ”„ Live

First Seen2026-07-26 15:20:29 UTC
Last Seen2026-08-12 20:37:58 UTC
Profile Built2026-08-12 20:51:09 UTC
Data FreshnessLive
Signal Types23
Total Observations24
๐Ÿ” 23 signal types ยท 24 observations collected
This report is generated from 23+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API ๐Ÿ”ง Actions API ๐Ÿ“ง Enterprise Access

โ„น๏ธ About This Report

All data shown is publicly available network metadata โ€” IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.