13.104.141.207
Intelligence Briefing: 13.104.141.207/32
The IP address 13.104.141.207 was associated with Microsoft Corporation (ASN 8075) within the 13.64.0.0/11 CIDR block. Geolocation data placed the host in Boston, US-MA, though a validation contradiction was recorded between this location and RTT physics measurements (24.0ms observed vs. 152.5ms minimum possible for the distance). Risk assessment indicated a Low Risk profile with a risk score of 25.
Service enumeration revealed no open ports, and the service purpose was classified as "Firewalled / No Services." Behavioral analysis returned zero incidents, enumeration strikes, or honeypot hits. The asset was not identified as a known attacker or Tor exit node. Control plane data showed one DNSBL listing across eight total lists, and the network neighborhood was classified as mostly clean with an abuse density of 0.0769.
Overall confidence was rated Very Low (0.2667), and intent classification remained unknown due to insufficient data. Recommendations advised monitoring the asset, noting that signal contradictions were present.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 13.64.0.0/11 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Unknown |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 40% | 2 | 5 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 27% | 2 | 2 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-20 04:06:43 UTC |
| Last Seen | 2026-09-27 07:21:48 UTC |
| Profile Built | 2026-09-27 07:27:59 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 28 |
Full dossier details are available via our API.