# 52.115.84.211 — IP Intelligence Summary

52.115.84.211 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure. As of October 26, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/52.115.84.211
- Last updated: 2026-10-26

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 52.96.0.0/12
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: San Antonio
- Region: TX
- Country: United States
- Time zone: America/Chicago

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 443/tcp — https

## Analyst narrative

Intelligence Report: 52.115.84.211

The IP address 52.115.84.211 was identified as a Microsoft Corporation asset (ASN 8075) located in San Antonio, Texas. Infrastructure analysis confirmed the address resided on Microsoft Azure cloud compute infrastructure, hosting a web server with port 443 (HTTPS) active. TLS inspection validated the certificate against the Microsoft TLS G2 RSA CA OCSP 10 issuer, identifying the subject as tr.teams.microsoft.com.

Threat intelligence data assigned a low risk score of 25. The address was not flagged as a known attacker or spam source, and no active threat indicators were detected. The immediate neighborhood (52.115.84.0/24) was classified as clean with no threat siblings. A single DNSBL listing was recorded, though the overall reputation remained low. Activity was observed from 2026-09-29 through 2026-10-23.

Standard operational guidance recommended monitoring the address, noting the classification as a suspicious host while acknowledging the low risk profile and lack of specific malicious intent.

## Nearby addresses

- 52.115.84.16 (https://ipdebrief.com/52.115.84.16)
- 52.115.84.19 (https://ipdebrief.com/52.115.84.19)
- 52.115.84.30 (https://ipdebrief.com/52.115.84.30)
- 52.115.84.40 (https://ipdebrief.com/52.115.84.40)
- 52.115.84.42 (https://ipdebrief.com/52.115.84.42)
- 52.115.84.44 (https://ipdebrief.com/52.115.84.44)
- 52.115.84.45 (https://ipdebrief.com/52.115.84.45)
- 52.115.84.46 (https://ipdebrief.com/52.115.84.46)
- 52.115.84.84 (https://ipdebrief.com/52.115.84.84)
- 52.115.84.88 (https://ipdebrief.com/52.115.84.88)
- 52.115.84.91 (https://ipdebrief.com/52.115.84.91)
- 52.115.84.92 (https://ipdebrief.com/52.115.84.92)

---

Source: IPDebrief, "52.115.84.211 IP intelligence", https://ipdebrief.com/52.115.84.211, updated 2026-10-26. Assessments are probabilistic.