52.112.84.164
Intellectual Briefing: IP 52.112.84.164/32
The system identified IP address 52.112.84.164 as infrastructure owned by Microsoft Corporation (ASN 8075) within the 52.96.0.0/12 CIDR block. Classification placed the address as a Microsoft Azure cloud compute resource serving as a web server. Network scans confirmed open TCP ports 80 (HTTP) and 443 (HTTPS), utilizing an SSL certificate issued by Microsoft TLS G2 RSA CA OCSP 16 for *.trouter.teams.microsoft.com and related domains.
Geolocation data mapped the address to San Antonio, TX, though physical measurement contradictions existed, noting an RTT of 59ms against a calculated minimum of 167.8ms for the distance. Reputation scoring assigned a Low Risk classification with a score of 25. Threat indicators remained absent, yet the control plane reported one DNSBL listing among eight total lists. Neighborhood analysis classified the subnet as mostly clean with an abuse density of 0.0938 and three identified threat siblings.
Due to signal contradictions and low confidence metrics, analysts recommended monitoring the asset at low severity. No active attacker behavior or known campaign associations were observed during the observation window from September 15 to September 18, 2026.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 52.96.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.trouter.teams.microsoft.com*.trouter.communication.microsoft.com*.trouter.communications.svc.cloud.microsoft |
| Valid From | 2026-08-28T12:27:04+00:00 |
| Valid Until | 2027-02-24T12:27:04+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384RSA |
| Validity Period | 180 days |
| Serial Number | 5500C2D8D9BD65E3B70F4FCDED000000C2D8D9 |
| Thumbprint | 5E4E3D2AEB32BB6B214F8484590623D210BE5AEA |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 6 |
| routing | 13% | 1 | 1 |
| services | 38% | 2 | 5 |
| ownership | 27% | 2 | 4 |
| reputation | 27% | 1 | 5 |
| geolocation | 27% | 2 | 3 |
| Overall | 28% | 10 | 24 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-09-15 20:43:05 UTC |
| Last Seen | 2026-09-27 12:07:18 UTC |
| Profile Built | 2026-09-27 12:15:04 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 47 |
Full dossier details are available via our API.