52.115.167.20
52.115.167.20 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Boydton, United States. It belongs to datacenter or hosting infrastructure. As of November 2, 2026, IPDebrief rates it Low Risk (0/100); no anonymizing service was detected.
Subject: IP Intelligence Briefing - 52.115.167.20/32
The IP address 52.115.167.20/32 was identified as Microsoft Corporation (AS8075) infrastructure, specifically operating within the Microsoft Azure CloudCompute environment in Boydton, Virginia, United States. Threat analysis classified the address as Low Risk with a risk score of 0.0, indicating no significant malicious activity or known campaign associations. No blacklist entries, proxy behaviors, or known attacker indicators were observed.
Active services included TCP port 443 (HTTPS). TLS inspection confirmed a certificate issued by Microsoft TLS G2 RSA CA OCSP 16 for the subject domain tr.teams.microsoft.com. DNS hygiene checks confirmed the presence of valid SPF and DMARC records. Operational assessment classified the intent as Legitimate Infrastructure.
The recommendation was to Allow traffic with a severity level of information only, based on the absence of significant risk indicators.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 52.96.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 80, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | tr.teams.microsoft.com*.tr.teams.microsoft.comturn.teams.microsoft.com*.turn.teams.microsoft.com*.relay.teams.microsoft.comaz.relay.teams.cloud.microsoft*.az.relay.teams.cloud.microsoftr0.az.relay.teams.microsoft.com*.r0.az.relay.teams.microsoft.comr0.az.relay.teams.cloud.microsoft |
| Valid From | 2026-08-30T02:00:38+00:00 |
| Valid Until | 2027-02-26T02:00:38+00:00 |
| TLS Protocol | Tls12 |
| Cipher Suite | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384RSA |
| Validity Period | 99 days |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 52.112.0.0/14 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 25% | 1 | 2 |
| reputation | 0% | 0 | 0 |
| geolocation | 25% | 1 | 1 |
| Overall | 20% | 5 | 6 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-10-14 16:35:56 UTC |
| Last Seen | 2026-11-02 12:46:17 UTC |
| Profile Built | 2026-11-02 13:08:45 UTC |
| Data Freshness | Live |
| Signal Types | 21 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 52.115.167.20
Who owns the IP address 52.115.167.20?
52.115.167.20 is registered to Microsoft Corporation. The address falls within the 52.96.0.0/12 network block. Registration is held at ARIN.
Where is 52.115.167.20 located?
Geolocation data places 52.115.167.20 in Boydton, VA, United States. The local time zone is America/New_York. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 52.115.167.20 malicious or safe?
52.115.167.20 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 52.115.167.20?
Responsive ports observed on 52.115.167.20 include 443. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 52.115.167.20 a VPN, proxy, or data center address?
52.115.167.20 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.