# 52.96.111.82 — IP Intelligence Summary

52.96.111.82 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Redmond, United States. As of October 29, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/52.96.111.82
- Last updated: 2026-10-29

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 52.96.0.0/12
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN

## Location

- City: Redmond
- Region: WA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: —
- Datacenter / hosting: no
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

Intelligence Briefing: 52.96.111.82/32

The endpoint was registered to Microsoft Corporation (ASN 8075, MSFT) within the 52.96.0.0/12 block. Geolocation data placed the asset in Redmond, Washington, though physics validation flagged the location as implausible due to RTT discrepancies indicating a distance of 6379.9km.

Services included TCP/80 (HTTP) and TCP/443 (HTTPS) with a TLS certificate issued for outlook.com. Behavioral analysis confirmed the host was not an active attacker, and no threat indicators were identified. Control plane analysis revealed one DNSBL listing against an eight-list total. Neighborhood analysis of the 52.96.111.0/24 subnet indicated a mixed classification with 0.25 abuse density and two threat-adjacent siblings.

Despite a Low Risk reputation score of 25, the asset was recommended for monitoring at low severity due to signal contradictions regarding geolocation and RTT physics.

## Nearby addresses

- 52.96.111.2 (https://ipdebrief.com/52.96.111.2)
- 52.96.111.18 (https://ipdebrief.com/52.96.111.18)
- 52.96.111.34 (https://ipdebrief.com/52.96.111.34)
- 52.96.111.50 (https://ipdebrief.com/52.96.111.50)
- 52.96.111.66 (https://ipdebrief.com/52.96.111.66)
- 52.96.111.98 (https://ipdebrief.com/52.96.111.98)
- 52.96.111.114 (https://ipdebrief.com/52.96.111.114)

---

Source: IPDebrief, "52.96.111.82 IP intelligence", https://ipdebrief.com/52.96.111.82, updated 2026-10-29. Assessments are probabilistic.