52.97.232.210
Intelligence Briefing: IP 52.97.232.210
Overview
The target was classified as low-risk infrastructure with a risk score of 0. No significant threat indicators were detected during the assessment, and the asset was identified as legitimate infrastructure.
Ownership and Location
The address was attributed to Microsoft Corporation (AS8075, MSFT). Geolocation data placed the asset in Redmond, WA, United States. The IP resides within the 52.96.0.0/12 CIDR block.
Technical Analysis
Network scans identified open ports 80 (HTTP) and 443 (HTTPS). The TLS certificate was issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1 for the subject `outlook.com`. The server banner returned Microsoft-HTTPAPI/2.0. No PTR hostnames were resolved, and forward DNS confirmation was not established.
Threat Assessment
The IP was not listed on any blacklists, with a blacklisting count of 0. Behavioral analysis showed no honeypot hits, enumeration strikes, or WAF violations. The neighborhood subnet (52.97.232.210/24) was classified as clean with zero abuse density and zero threat siblings.
Recommendation
The intelligence indicates legitimate infrastructure with clean reputation. The recommended action is to allow traffic with an informational severity level.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 52.96.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 0% (None) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | Microsoft-HTTPAPI/2.0 |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | outlook.com*.hotmail.com*.internal.outlook.com*.live.com*.office.com*.office365.com*.outlook.com*.outlook.office365.comattachment.outlook.live.netattachment.outlook.office.net |
| Valid From | 2026-06-26T00:00:00+00:00 |
| Valid Until | 2027-01-10T23:59:59+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha256RSA |
| Validity Period | 198 days |
| Serial Number | 0E371D2766FD365DADDCF4004297839E |
| Thumbprint | C7C19E04464D744D810EF31A24C54FC22A7909C5 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 35% | 2 | 2 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 22% | 6 | 7 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-06 22:32:11 UTC |
| Last Seen | 2026-09-06 22:32:11 UTC |
| Profile Built | 2026-09-06 22:47:03 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 22 |
Full dossier details are available via our API.