Advice Request Have I been pwned?

[notabot]

Yesterday when I was trying to see if I can optimize windows ( make them faster ), I noticed something odd

svchost connects to a remote IP 52.230.84.217 at the standard https port (443).

52.230.84.217 is odd because it is a site with an invalid certificate

VirusTotal detects nothing on that IP but the lack of valid certificate just feels ackward

Any help would be appreciated. Ie does anyone else see this connection ? Does anyone know more on this IP? Any hints would be appreciated

 

[Arequire]

It's a Microsoft IP based in Singapore. You're fine.

 

[notabot]

It's a Microsoft IP based in Singapore. You're fine.

Why the broken cert though ? I doubt Microsoft just forgot to upgrade their cert

 

[Arequire]

Why the broken cert though ? I doubt Microsoft just forgot to upgrade their cert

Couldn't tell you. Suggest you contact Microsoft and ask them about it.

 

[notabot]

Couldn't tell you. Suggest you contact Microsoft and ask them about it.

It’s actually a Microsoft Azure IP - so anyone could be the owner of the instance it’s just deployed to Microsoft’s cloud service

 

[notabot]

Don’t know how accurate this is

C2 Server - AlienVault - Open Threat Exchange

But it claims it’s a c&c

 

[kylprq]

microsoft use these ips for update distiribution for example akamai networks it is non microsoft firm but microsoft distiribute its updates over like this firms all over the world but ı dont know well sometimes i see these ips too

 

[notabot]

microsoft use these ips for update distiribution for example akamai networks it is non microsoft firm but microsoft distiribute its updates over like this firms all over the world but ı dont know well sometimes i see these ips too

Thanks comforting to hear

 

[Mr.X]

As long as they don't grab your DNA no need to be worried whatsoever.