# 104.212.67.97 — IP Intelligence Summary

104.212.67.97 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Redmond, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name ch1r9a.msedge.net. As of November 3, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/104.212.67.97
- Last updated: 2026-11-03

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 104.208.0.0/13
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: Redmond
- Region: WA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- ch1r9a.msedge.net
- Forward-confirmed: yes

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

Intelligence analysis identified IP 104.212.67.97/32 as a Microsoft Corporation asset (ASN 8075) operating within the Microsoft Azure cloud infrastructure. The address resolved to the edge hostname ch1r9a.msedge.net and served standard HTTP and HTTPS traffic on ports 80 and 443. TLS certificates were issued by Microsoft TLS G2 ECC CA.

Threat assessment assigned a Low Risk reputation score of 25. The IP was not flagged as a known attacker, spam source, or Tor exit node. Threat feeds reported zero blacklists, though control plane data indicated one DNSBL listing across eight total lists. Geolocation validation recorded a discrepancy between the reported Redmond, Washington coordinates and network physics, flagging an RTT of 44ms against a minimum possible distance of 152.5ms for that region.

The immediate 104.212.67.0/24 neighborhood maintained a clean classification with an abuse density of 0.0476. Behavioral analysis logged zero incidents or honeypot strikes. While the overall risk profile remained low, signal contradictions led to a recommendation for monitoring rather than immediate blocking.

## Nearby addresses

- 104.212.67.5 (https://ipdebrief.com/104.212.67.5)
- 104.212.67.10 (https://ipdebrief.com/104.212.67.10)
- 104.212.67.12 (https://ipdebrief.com/104.212.67.12)
- 104.212.67.15 (https://ipdebrief.com/104.212.67.15)
- 104.212.67.32 (https://ipdebrief.com/104.212.67.32)
- 104.212.67.38 (https://ipdebrief.com/104.212.67.38)
- 104.212.67.58 (https://ipdebrief.com/104.212.67.58)
- 104.212.67.64 (https://ipdebrief.com/104.212.67.64)
- 104.212.67.85 (https://ipdebrief.com/104.212.67.85)
- 104.212.67.86 (https://ipdebrief.com/104.212.67.86)
- 104.212.67.113 (https://ipdebrief.com/104.212.67.113)
- 104.212.67.120 (https://ipdebrief.com/104.212.67.120)

---

Source: IPDebrief, "104.212.67.97 IP intelligence", https://ipdebrief.com/104.212.67.97, updated 2026-11-03. Assessments are probabilistic.