207.46.13.127
IP Intelligence Briefing: 207.46.13.127
Date: June 10, 2026
---
**1. Core Profile**
- Risk Score: Low Risk (25/100)
- Ownership: Microsoft Corporation (ASN 8075)
- Geolocation: Quincy, WA, USA (47.61°N, -122.33°W)
- Network Role: Microsoft Azure cloud infrastructure (firewalled, no services exposed)
- Threat Indicators: No malicious activity detected (no indicators, blacklists, or campaigns).
---
**2. Observation History**
- Recent Activity:
- DNS resolution for `msn.com` (June 10, 2026) with CAA records.
- Consistent low-risk classification over 16 observations (no spikes in threat signals).
---
**3. Relationships & Context**
- Linked Entities:
- DNS hostname: `msnbot-207-46-13-127.search.msn.com` (Microsoft botnet node).
- Subnet: `207.46.0.0/19` (Microsoft GLOBAL-NET).
- Network Classification: CloudCompute (Azure) with no public services or vulnerabilities.
---
**4. Neighborhood Analysis**
- Subnet (207.46.13.0/24):
- 23 total IPs, 1 medium-risk neighbor (207.46.13.54, riskScore 50), others low-risk.
- Abuse density: 0% (no malicious activity in subnet).
---
**5. Recommendations**
- SOC Action:
- Monitor DNS queries to `msn.com` for anomalies (e.g., unexpected volumes or new subdomains).
- Verify if the Microsoft botnet node is part of legitimate operations (e.g., search indexing).
- No immediate mitigation required for this IP, but maintain visibility due to its public-facing nature.
---
Conclusion: This IP is part of Microsoft's Azure infrastructure, associated with benign botnet activity. No active threats detected. Focus on contextual anomalies in its network behavior.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | — |
| CIDR Block | — |
| RIR | ARIN |
| Country | — |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | msnbot-207-46-13-127.search.msn.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | msnbot-207-46-13-127.search.msn.com |
🔐 DNS Hygiene
| Hygiene Score | 100% (Excellent) |
| SPF | Present |
| DMARC | Present |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 20% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 20% | 9 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-23 12:23:18 UTC |
| Last Seen | 2026-06-28 21:27:43 UTC |
| Profile Built | 2026-06-29 03:32:03 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.