72.154.7.111
72.154.7.111 is an IPv4 address operated by BNA ADSL CBB (AS8075), geolocated to Quincy, United States. It belongs to datacenter or hosting infrastructure. As of November 3, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
The IP address 72.154.7.111/32 was identified as a High Risk host with a risk score of 70. Infrastructure analysis placed the endpoint within a Microsoft Azure CloudCompute environment under ASN 8075 (BNA ADSL CBB). The system served HTTPS traffic on port 443 using Microsoft IIS 10.0 and ASP.NET with a Microsoft-issued TLS certificate.
Geolocation data assigned the host to Quincy, WA, United States, yet RTT physics measurements contradicted this location. The system was listed on one of eight DNS blacklists and returned a 403 status code during probing. The surrounding /24 subnet showed an abuse density of 0.1739, with four threat siblings detected among 22 active peers.
Security assessments classified the threat actor type as Suspicious Host with a critical severity recommendation to Block. No specific known campaigns were correlated with this address.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | BNA ADSL CBB |
| ASN | AS8075 |
| Network Name | BLS-72-154-0-0-16-1104204201 |
| CIDR Block | 72.154.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | — |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 3/3 domains |
| DMARC | 3/3 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 3 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.prod.do.dsp.mp.microsoft.com |
| Valid From | 2026-07-23T19:15:25+00:00 |
| Valid Until | 2027-07-23T19:15:25+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 365 days |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 72.152.0.0/14 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 32% | 2 | 9 |
| routing | 8% | 1 | 1 |
| services | 22% | 2 | 4 |
| ownership | 12% | 2 | 2 |
| reputation | 24% | 1 | 6 |
| geolocation | 22% | 2 | 4 |
| Overall | 20% | 10 | 26 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-27 19:18:55 UTC |
| Last Seen | 2026-11-03 01:21:42 UTC |
| Profile Built | 2026-11-03 01:56:34 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 52 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 72.154.7.111
Who owns the IP address 72.154.7.111?
72.154.7.111 is registered to BNA ADSL CBB. The address falls within the 72.154.0.0/16 network block. Registration is held at ARIN.
Where is 72.154.7.111 located?
Geolocation data places 72.154.7.111 in Quincy, WA, United States. The local time zone is America/Los_Angeles. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 72.154.7.111 malicious or safe?
72.154.7.111 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 72.154.7.111?
Responsive ports observed on 72.154.7.111 include 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 72.154.7.111 a VPN, proxy, or data center address?
72.154.7.111 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.