52.180.137.70📋 Copy

## IP Intelligence Briefing: 52.180.137.70/32

Classification: Low Risk / Legitimate Infrastructure

Date of Analysis: 2026-07-30

---

**Executive Summary**

IP address 52.180.137.70 is a Microsoft Azure cloud infrastructure endpoint with a risk score of 25 (Low Risk). The IP belongs to Microsoft Corporation (ASN 8075) in the 52.145.0.0/16 CIDR block, geolocated to Boston, MA. No malicious indicators, threat campaigns, or abuse activity detected. The subnet shows clean classification with zero abuse density.

---

**Ownership & Infrastructure**

• Organization: Microsoft Corporation
• ASN: 8075 (MSFT)
• Network Block: 52.145.0.0/16
• Infrastructure Type: CloudCompute (Microsoft Azure)
• Country/Region: United States / US-MA
• City: Boston
• Registration: ARIN

---

**Threat Assessment**

• Risk Score: 25 (Low Risk)
• Abuse Confidence Score: Not applicable
• Blacklist Status: 0 listings
• Known Campaigns: None detected
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

---

**DNS & Resolution**

• PTR Hostname: azpdcgfwt7xy.stretchoid.com
• Reverse DNS: Forward confirmed
• DNS Classification: Microsoft Azure DNS pattern

---

**Network Neighborhood (52.180.137.0/24)**

• Abuse Density: 0 (Clean)
• Total Siblings: 2
• Active Siblings: 1
• Threat Siblings: 0
• Neighbor Risk Distribution: 1 low-risk IP (52.180.137.14, risk score 25)

---

**Observation History**

• Total Observations: 17 signals
• Ownership Stability: 0 changes
• Threat Persistence: 0 days
• Threat Observation Count: 0
• Recent Signals (2026-07-30):

- Geolocation confirmed: Boston, US-MA (confidence 0.70)

- Organization confirmed: Microsoft Corporation (confidence 0.90)

- Subnet classification: Clean (confidence 0.40)

- Ownership changes: None recorded

---

**Services & Ports**

• Open Ports: None detected
• HTTP Services: None
• TLS Certificates: None
• Classification: Firewalled / No Services

---

**Recommended Actions**

No firewall rules or blocking actions recommended. The IP represents legitimate Microsoft Azure infrastructure with no observable malicious behavior. Standard cloud provider traffic should be allowed.

---

**SOC Analyst Notes**

This IP is part of Microsoft's Azure cloud infrastructure. The hostname pattern (azpdcgfwt7xy.stretchoid.com) is consistent with Microsoft Azure's DNS naming conventions. The subnet shows no abuse indicators, and the single active sibling IP shares the same low-risk profile. No threat intelligence or abuse signals detected. Traffic to/from this IP should be treated as benign cloud provider traffic.

Recommendation: No action required. Continue monitoring standard cloud provider traffic patterns.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.