104.44.237.210
IP 104.44.237.210 was identified as a Microsoft Corporation cloud computing endpoint under ASN 8075. The asset was assigned a Low Risk reputation score of 25. Reverse DNS resolution linked the host to MSN.net infrastructure, and no open ports were detected. Geolocation data placed the host in Madison, Wisconsin, though physics-based RTT measurements contradicted the claimed location, showing a minimum possible RTT of 152.5ms against an observed 33ms. The IP was listed on one of eight DNS blacklist sources and classified as a Suspicious Host. No known campaigns or active threats were correlated. Observers were recommended to monitor the asset due to signal contradictions and DNSBL presence.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 104.40.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | ae21-0.bn1-96c-1a.ntwk.msn.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | ae21-0.bn1-96c-1a.ntwk.msn.net |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 7 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 3 |
| geolocation | 33% | 2 | 5 |
| Overall | 25% | 10 | 22 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-30 02:14:35 UTC |
| Last Seen | 2026-09-27 16:03:30 UTC |
| Profile Built | 2026-09-27 16:13:20 UTC |
| Data Freshness | Live |
| Signal Types | 25 |
| Total Observations | 45 |
Full dossier details are available via our API.