52.153.175.198📋 Copy

IP INTELLIGENCE BRIEFING: 52.153.175.198/32

Classification: LOW RISK / BENIGN

Report Date: 2026-06-16

Risk Score: 25/100

---

OWNERSHIP & INFRASTRUCTURE

The target IP is owned by Microsoft Corporation (ASN 8075) within the MSFT CIDR block (52.145.0.0/16). The IP operates as Microsoft Azure cloud compute infrastructure with firewalled/no services exposed. The IP is hosted in the United States (Cheyenne, WY region) with geolocation validation confirmed.

Key Attributes:

• ASN: 8075 (Microsoft Corporation)
• BGP Prefix: 52.152.0.0/13
• Network Classification: CloudCompute / Hosting
• Is Anycast: No
• Is Cloud: Yes

---

THREAT INDICATORS

No malicious indicators detected.

• Abuse Confidence Score: N/A
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• DNSBL Listed: 1 (minimal impact)
• Threat Feeds: None correlated

The IP shows no evidence of campaign activity, attacker behavior, or spam distribution.

---

NETWORK NEIGHBORHOOD ANALYSIS

The /24 subnet (52.153.175.0/24) shows an abuse density of 0.5 with a "mostly_clean" classification.

Neighborhood Statistics:

• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2

Active Neighbor:

• 52.153.175.200: Risk Score 25, Authority Score 50

---

OBSERVATION HISTORY

The IP has generated 21 observations with the most recent signal activity dated 2026-06-16. Historical analysis indicates:

• Ownership Changes: 0
• Threat Persistence Days: 0
• Threat Observation Count: 1
• Persistently Malicious: No

Historical signals show stable, benign behavior with no escalation of threat activity over time.

---

NETWORK SERVICES & DNS

• Open Ports: None detected
• TLS Certificate: N/A
• Forward DNS Resolution: Not confirmed
• PTR Hostnames: None
• Hosted Domains: 0

---

CONTROL PLANE DATA

• Route Changes (30d): 0
• Route Stable: No
• RPKI State: N/A
• DNSSEC Valid: Yes
• Operator Score: 0.1304 (Minimal)

---

RECOMMENDED ACTIONS

No security actions required. The IP is classified as Low Risk and represents legitimate Microsoft Azure cloud infrastructure with no threat indicators. Standard monitoring is sufficient.

Firewall Rules: No restrictive rules recommended. Allow traffic with standard cloud security policies.

---

SUMMARY: 52.153.175.198 is a benign Microsoft Azure cloud infrastructure IP with no malicious indicators, no blacklist associations, and stable historical behavior. The IP operates within a low-abuse-density subnet and shows no evidence of being used for attacks, spam, or other malicious activities. SOC teams may monitor but no blocking or restrictive actions are warranted.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.