207.46.13.64📋 Copy

IP Intelligence Briefing: 207.46.13.64

Date: 2026-06-12

---

**1. IP Profile**

• Risk Score: 25 (Low Risk)
• Provider: Microsoft Corporation (AS8075)
• Geolocation: Madison, WI, US (Bingbot infrastructure)
• Network Role: CloudCompute (Microsoft)
• Threat Indicators: No active threats detected.
• DNS: Associated with `msnbot-207-46-13-64.search.msn.com` (Microsoft-owned).

Key Findings:

• The IP is part of Microsoft's global network (`MICROSOFT-GLOBAL-NET`) and is associated with Bingbot, likely a crawler or indexing bot.
• No open ports or TLS certificates detected, suggesting a server or infrastructure asset.
• Historical data shows low risk, but one observation flagged "has_threats" with 20 pulses (potential false positives or outdated data).

---

**2. Observation History**

• Recent Activity (2026-06-12):

- Low Risk: Consistent with Microsoft's infrastructure.

- Threat Signals: One observation (confidence 0.95) indicated "has_threats" with 20 pulses, but no current indicators.

- Geolocation: Plausible in Madison, WI, but no RTT or probe data.

- Network Stability: Route stability score is 0 (unstable), but Microsoft's infrastructure is generally reliable.

Recommendation: Monitor for anomalies in threat signals or unexpected geolocation changes.

---

**3. Relationships**

• Linked Entities:

- Microsoft Corporation (AS8075)

- DNS: `msnbot-207-46-13-64.search.msn.com` (Microsoft domain)

- Subnet: `207.46.13.64/24` (mixed classification, 0.22 abuse density).

Key Findings:

• Strong ties to Microsoft's infrastructure.
• No connections to known malicious organizations or campaigns.
• DNS records are valid and consistent with Microsoft's domain.

---

**4. Neighborhood Analysis**

• Subnet: `207.46.13.64/24`
• Abuse Density: 0 (low risk).
• Neighbors:

- 30 IPs in subnet, most with low risk (25/30).

- 6 IPs flagged as "threat siblings" (riskScore ≥25).

Key Findings:

• Subnet is mixed but primarily low-risk.
• No immediate threats in the neighborhood, but 6 IPs have higher risk scores.

---

**5. Actionable Intelligence**

• SOC Analyst Notes:

- The IP is likely a legitimate Microsoft asset (Bingbot crawler).

- Historical threats may be false positives or outdated data.

- Monitor subnet activity for unusual traffic or new threat indicators.

- No immediate mitigation required, but ensure alignment with Microsoft's network behavior.

Next Steps:

• Cross-check with Microsoft's internal systems to confirm the IP's role.
• Continuously monitor for changes in threat signals or geolocation.

---

End of Briefing

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.