# 23.97.62.147 — IP Intelligence Summary

23.97.62.147 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Singapore, Singapore. It belongs to datacenter or hosting infrastructure. As of October 11, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/23.97.62.147
- Last updated: 2026-10-11

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 23.96.0.0/13
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: Singapore
- Region: SG
- Country: Singapore
- Time zone: Asia/Singapore

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\# IP Intelligence Briefing: 23.97.62.147

**Classification:** Low Risk Cloud Infrastructure

**Date:** 2026-07-28

**Analyst:** IPDebrief Intelligence

\---

\## Executive Summary

IP 23.97.62.147 is a Microsoft Corporation cloud infrastructure endpoint located in Singapore. The IP exhibits low-risk characteristics typical of Azure cloud services with no active threat indicators. The IP is part of Microsoft's /13 CIDR block (23.96.0.0/13) and operates as a firewalled cloud resource with no exposed services.

\---

\## Profile Assessment

**Risk Profile:**

\- Overall Risk Score: 25 (Low Risk)

\- Reputation: Low Risk

\- Abuse Confidence Score: Not applicable (no active abuse detected)

\- Classification: Microsoft Azure cloud infrastructure

**Ownership & Registration:**

\- ASN: 8075 (Microsoft Corporation)

\- Organization: MSFT

\- RIR: ARIN

\- Network Block: 23.96.0.0/13

\- Abuse Contact: Available via RDAP

**Geolocation:**

\- Country: Singapore (SG)

\- City: Singapore

\- Coordinates: 1.35°N, 103.82°E

\- Geo Validation: Plausible (ICMP blocked for validation)

\- Minimum Possible RTT: 207.7ms

\---

\## Threat Indicators

**Threat Status:** CLEAN

\- Active Threat Indicators: None

\- Known Campaigns: None

\- Blacklist Count: 0

\- Threat Feeds: None

\- Known Attacker: No

\- Spam Source: No

\- Tor Exit Node: No

**Control Plane Data:**

\- DNSSEC: Valid

\- DNSBL Listed: 1 of 8 lists

\- Operator Score: 0.1304 (Minimal)

\- Route Stability: False

\- RPKI State: Not applicable

\---

\## Network Services

**Service Exposure:** Firewalled / No Services

\- Open Ports: None detected

\- TLS Certificates: None

\- HTTP Services: None

\- PTR Hostnames: None

\- Forward Resolution: None

**Email Reputation:**

\- SPF: Not configured

\- DMARC: Not configured

\- TXT Records: 0

\---

\## Neighborhood Analysis (23.97.62.0/24)

**Subnet Risk Assessment:**

\- Classification: Mostly Clean

\- Abuse Density: 0.1 (Low)

\- Total Siblings: 10

\- Active Siblings: 7

\- Threat Siblings: 1

**Neighbor Risk Distribution:**

\- High Risk: 0 IPs

\- Medium Risk: 4 IPs

\- Low Risk: 8 IPs

**Notable Neighbors:**

\- 23.97.62.112: Risk Score 65 (Elevated)

\- 23.97.62.130: Risk Score 50 (Medium)

\- 23.97.62.113, .119, .133: Risk Scores 25-40 (Variable)

\---

\## Observation History

**Monitoring Period:** 18 observations

**Key Findings:**

\- No persistent malicious behavior detected

\- Threat persistence days: 0

\- Ownership changes: 0

\- Campaign likelihood: None

\- Correlated IPs: 0

**Recent Signals (2026-07-28):**

\- Network scan detected with low confidence (0.30)

\- Port scanning activity observed

\- Geolocation validation attempted (ICMP blocked)

\- Subnet abuse density classification: Mostly clean

\---

\## Relationships

**Network Relationships:** 6 relationships identified

\- All classified as "Same Network" connections

\- Targets: Multiple MSFT network references

\- No external organizational relationships detected

\---

\## Recommended Actions

**Firewall/Network Rules:**

\- **No blocking required** – IP classified as low-risk cloud infrastructure

\- Standard Microsoft Azure egress policies apply

\- Consider whitelisting if legitimate Azure traffic expected

**Monitoring Recommendations:**

\- Monitor for any service exposure changes

\- Track neighborhood IP 23.97.62.112 (elevated risk score 65)

\- No immediate threat mitigation needed

**Threat Intelligence Notes:**

\- IP represents legitimate Microsoft Azure infrastructure

\- No active threat campaigns correlated

\- Subnet abuse density minimal

\- No evidence of malicious activity

\---

**Briefing Complete**

*Generated from IPDebrief intelligence platform data*

## Nearby addresses

- 23.97.62.112 (https://ipdebrief.com/23.97.62.112)
- 23.97.62.113 (https://ipdebrief.com/23.97.62.113)
- 23.97.62.115 (https://ipdebrief.com/23.97.62.115)
- 23.97.62.116 (https://ipdebrief.com/23.97.62.116)
- 23.97.62.119 (https://ipdebrief.com/23.97.62.119)
- 23.97.62.121 (https://ipdebrief.com/23.97.62.121)
- 23.97.62.129 (https://ipdebrief.com/23.97.62.129)
- 23.97.62.130 (https://ipdebrief.com/23.97.62.130)
- 23.97.62.133 (https://ipdebrief.com/23.97.62.133)
- 23.97.62.134 (https://ipdebrief.com/23.97.62.134)
- 23.97.62.135 (https://ipdebrief.com/23.97.62.135)
- 23.97.62.141 (https://ipdebrief.com/23.97.62.141)

---

Source: IPDebrief, "23.97.62.147 IP intelligence", https://ipdebrief.com/23.97.62.147, updated 2026-10-11. Assessments are probabilistic.
