72.153.5.97
Subject: Intelligence Briefing – IP 72.153.5.97/32
Overview
The IP address 72.153.5.97/32 was identified as a Microsoft Azure cloud compute endpoint. Registration data listed the address under ASN 8075 (MIA ADSL EEUA) within the 72.153.0.0/16 CIDR block. The network role was classified as a web server.
Threat Assessment
The target maintained a low-risk reputation score of 20. No malicious indicators were observed; the address was not flagged as a known attacker, spam source, or Tor exit node. Zero blacklist hits were recorded. Behavioral analysis showed zero honeypot hits, enumeration strikes, or WAF violations.
Technical Profile
The system operated on port 443 using the Microsoft-IIS/10.0 server banner. An SSL certificate issued by Microsoft Corporation validated the domain *.prod.do.dsp.mp.microsoft.com. The infrastructure hosted domains with SPF and DMARC records enabled.
Data Inconsistencies
Analysis indicated signal contradictions regarding geolocation. While the profile mapped the location to Virginia, US, the RTT measurement of 32.0ms contradicted the minimum possible physics for the reported distance of 6553.3 km.
Neighborhood and Control Plane
The immediate /24 subnet was classified as mostly clean with a 0.1 abuse density. The control plane showed 0 route changes within 30 days, though the BGP prefix stability was marked as false.
Recommendation
The overall confidence level was labeled Very Low. The recommended action was Monitor. This decision accounted for signal contradictions present in the dataset despite the low-risk classification.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | MIA ADSL EEUA |
| ASN | AS8075 |
| Network Name | BLS-72-153-0-0-1003020946 |
| CIDR Block | 72.153.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | Microsoft-IIS/10.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.prod.do.dsp.mp.microsoft.com |
| Valid From | 2025-12-11T19:07:58+00:00 |
| Valid Until | 2026-12-11T19:07:58+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 365 days |
| Serial Number | 3300000058234D607F3185EFA6000000000058 |
| Thumbprint | 9318AACF92431DDE9F5B9382F2F0B46CEA25EF6E |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 30% | 3 | 4 |
| services | 38% | 2 | 5 |
| ownership | 19% | 2 | 2 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 4 |
| Overall | 26% | 12 | 20 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-03 23:45:43 UTC |
| Last Seen | 2026-09-23 11:18:56 UTC |
| Profile Built | 2026-09-23 11:24:42 UTC |
| Data Freshness | Live |
| Signal Types | 27 |
| Total Observations | 40 |
Full dossier details are available via our API.