52.110.1.158📋 Copy

Intelligence Briefing: IP 52.110.1.158/32

Ownership and Role

The IP address is registered to Microsoft Corporation (ASN 8075) within the 52.96.0.0/12 block. Geolocation data placed the host in Redmond, Washington, US, with a network role classification of Cloud Compute hosting a Web Server.

Technical Profile

Active services included HTTP (port 80) and HTTPS (port 443). The TLS certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 with the subject CN=outlook.com. The server banner reported Microsoft-HTTPAPI/2.0, and HTTP/2.0 was supported. SPF and DMARC records were present, though DNSSEC and CAA were absent.

Threat and Reputation

Reputation assessment returned a Low Risk score of 25. The address was not identified as a known attacker, spam source, or Tor exit node. Blacklist queries returned 0 direct blocks, though 1 DNSBL listing existed within 8 total lists. No threat indicators, campaigns, or active incident strikes were recorded. The neighborhood classification remained mostly clean with an abuse density of 0.1159.

Anomalies and Contradictions

Data consistency analysis highlighted a contradiction between claimed geolocation and RTT physics measurements (52ms average observed vs. 141.3ms minimum possible).

Recommendation

The final recommendation was to Monitor the asset at low severity due to signal contradictions present. No immediate firewall rules were required.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.