Intelligence assessment for IP 104.44.28.162 identified the address as a Microsoft Corporation cloud compute resource within the 104.40.0.0/13 block. Geolocation data placed the host in Madison, WI. Operational analysis confirmed the asset was firewalled with no active open ports or exposed services. Although the address appeared on one of eight DNS blacklists, the overall reputation risk score remained low at 25. No specific threat indicators, known campaigns, or active attacker signatures were associated with the host. The associated subnet maintained a clean classification with zero abuse density and zero threat siblings. The asset was tagged as a suspicious host but received a low severity monitoring recommendation due to the lack of observable malicious activity.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 104.40.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | be21.ibr01.mrs21.ntwk.msn.net |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | be21.ibr01.mrs21.ntwk.msn.net |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 27% | 2 | 4 |
| Overall | 25% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-09-04 10:39:54 UTC |
| Last Seen | 2026-09-24 05:44:58 UTC |
| Profile Built | 2026-09-24 05:57:30 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 37 |
Full dossier details are available via our API.