104.44.31.239
The IP address 104.44.31.239 was identified as belonging to Microsoft Corporation (AS8075) within the 104.40.0.0/13 network block. Geolocation data placed the endpoint in Madison, Wisconsin, US. The overall reputation was classified as Low Risk with a score of 25. No active threat indicators, known campaigns, or blacklist listings were observed. The infrastructure type was categorized as CloudCompute and Hosting, with no open ports or active services detected, indicating a firewalled state.
The address resided in a /24 subnet with a mixed classification, containing four threat siblings and an inherited risk score of 9. DNS resolution pointed to be5.ibr03.bn6.ntwk.msn.net under the msn.net domain, with no SPF or DMARC records present. Behavioral analysis showed no honeypot hits, enumeration strikes, or WAF violations. Based on the mixed neighborhood context, the recommended action was Monitor with a Low severity rating.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 104.40.0.0/13 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | be5.ibr03.bn6.ntwk.msn.net |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
| Forward Hostnames | be5.ibr03.bn6.ntwk.msn.net |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | 0/2 domains |
| DMARC | 0/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 1 |
| geolocation | 13% | 1 | 1 |
| Overall | 20% | 9 | 12 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 04:48:21 UTC |
| Last Seen | 2026-09-27 16:03:03 UTC |
| Profile Built | 2026-09-27 16:16:35 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 30 |
Full dossier details are available via our API.