52.123.187.51
The IP address 52.123.187.51/32 was observed as a Low Risk asset with a risk score of 25. Ownership attribution links the address to Microsoft Corporation (ASN 8075) within the Microsoft Azure cloud infrastructure. The infrastructure type was identified as Cloud Compute, providing Web Server services over TCP ports 80 and 443. TLS certificates were verified as issued by Microsoft TLS G2 RSA CA OCSP 10 for *.trouter.teams.microsoft.com.
Threat analysis revealed no direct indicators of compromise or blacklisting, though the threat actor classification labeled the host as "Suspicious Host" with a tag of "suspicious." Neighborhood data indicated a mixed classification for the /24 subnet, with an abuse density of 0.2105 and four threat siblings detected among 19 active addresses.
Technical validation noted a contradiction between claimed geolocation coordinates in Virginia and RTT physics measurements. The geolocation validation showed an RTT of 31ms against a minimum possible calculation of 127.6ms for the claimed distance. DNS hygiene was rated Fair, with SPF and DMARC present but lacking DNSSEC.
The recommendation for this asset is to Monitor due to signal contradictions present in the data. Signal confidence was rated Very Low with a data sufficiency score of 0.6667.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 52.120.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 4/4 domains |
| DMARC | 4/4 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 4 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| Closed Ports | 22, 25, 3389, 8080, 8443 (2 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | *.trouter.teams.microsoft.com*.trouter.communication.microsoft.com*.trouter.communications.svc.cloud.microsoft |
| Valid From | 2026-08-23T16:36:10+00:00 |
| Valid Until | 2027-02-19T16:36:10+00:00 |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384RSA |
| Validity Period | 180 days |
| Serial Number | 4900CBA93BCE2ED24C7D6FD5EA000000CBA93B |
| Thumbprint | 9334FFBDC9AF5B5E1789309B016193A95C13F478 |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 42% | 2 | 6 |
| ownership | 27% | 2 | 4 |
| reputation | 22% | 1 | 4 |
| geolocation | 38% | 2 | 5 |
| Overall | 28% | 10 | 24 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-08-30 23:06:45 UTC |
| Last Seen | 2026-09-20 20:02:17 UTC |
| Profile Built | 2026-09-20 20:17:40 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 42 |
Full dossier details are available via our API.