52.188.147.239📋 Copy

# IP Intelligence Briefing: 52.188.147.239/32

Date: June 2026

Classification: Low Risk

Risk Score: 25/100

## Executive Summary

IP address 52.188.147.239 is assigned to Microsoft Corporation (ASN 8075) within the MSFT network block (52.145.0.0/16). The IP operates as Microsoft Azure cloud infrastructure with no open services detected. Historical observations indicate persistent clean classification with no malicious activity patterns observed.

## Ownership and Infrastructure Profile

• Organization: Microsoft Corporation
• ASN: 8075
• Network: MSFT (52.145.0.0/16)
• Infrastructure Type: CloudCompute
• Provider: Microsoft Azure
• Geolocation: Virginia, United States (37.37°N, -79.46°W)
• Timezone: America/New_York

The IP is registered to Microsoft's cloud infrastructure and is classified as hosting-enabled with firewall protection enabled (firewalled/no services).

## Threat Assessment

• Abuse Confidence Score: Not applicable (legitimate infrastructure)
• Blacklist Count: 0
• Threat Indicators: None detected
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

The IP shows no threat indicators across all monitored threat feeds. Control plane analysis indicates route stability issues but no malicious routing behavior.

## Network Neighborhood Analysis

• Subnet: 52.188.147.239/24
• Abuse Density: 0 (clean)
• Threat Siblings: 0
• Active Siblings: 0
• Total Siblings: 1

The /24 subnet maintains a clean classification with no adjacent addresses exhibiting malicious behavior patterns.

## Observation History

Historical analysis reveals 17 observations spanning June 2026. Key findings include:

• Operator Score: 0.1304 (minimal)
• Ownership Changes: 0
• Threat Persistence Days: 0
• Persistently Malicious: No
• Recent Classification: Clean (subnet-level analysis)

The IP has demonstrated consistent, non-malicious behavior across all observation periods with no escalation in risk posture.

## Relationship Graph

Four network-level relationships identified, all associated with Microsoft (MSFT) infrastructure. No connections to external organizations, hostnames, or certificates detected.

## Recommended Actions

No blocking recommended. This IP represents legitimate Microsoft Azure cloud infrastructure. Standard allow-listing or firewall rules permitting outbound traffic to/from this IP are appropriate for normal cloud service operations. No firewall rules required.

## SOC Analyst Notes

This IP should be treated as legitimate cloud infrastructure. If connection attempts to this IP are flagged as suspicious, investigate whether the client system has been compromised attempting to exfiltrate data through Microsoft Azure services. No defensive action required at the network perimeter for this IP address.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.