Skip to content

Hostname

ic3.events.data.microsoft.com

Last fetched

ic3.events.data.microsoft.com resolves to 13 IPv4 addresses operated by MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft Corporation in US.

Nutrition Label

WHISPER CANON · ic3.events.data.microsoft.comRouting diversity3.9/10Peering density7.8/10MOAS conflict✓ noneThreat-feed listings6.8/10WHOIS transparency0.0/10Resolver footprint4.6/10canon.whisper.security/host/ic3.events.data.microsoft.com

Resolution chain

ic3.events.data.microsoft.com resolves to 13 distinct IPv4 addresses via WhisperGraph DNS data. Each row links to the IP, prefix, and announcing ASN.

IPPrefixASNOperatorCountry
104.208.16.89104.208.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
104.208.16.90104.208.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
104.208.16.91104.208.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
13.69.239.7413.64.0.0/11AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationIE
13.89.179.813.64.0.0/11AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
20.189.173.1020.184.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
20.189.173.620.184.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
20.42.73.2420.40.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
20.42.73.2520.40.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
20.42.73.2620.40.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
52.178.17.352.160.0.0/11AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationNL
20.184.175.1920.184.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS
20.184.175.020.184.0.0/13AS8075MICROSOFT-CORP-MSN-AS-BLOCK - Microsoft CorporationUS

WHOIS identity

No WHOIS records are currently associated with ic3.events.data.microsoft.com in WhisperGraph.

Threat posture

History

Related pages

Pivot deeper into the graph from ic3.events.data.microsoft.com.

Cypher and MCP

Reproduce the resolution chain directly against graph.whisper.security:

MATCH (h:HOSTNAME {name: "ic3.events.data.microsoft.com"})-[:RESOLVES_TO]->(ip:IPV4)
      -[:ANNOUNCED_BY]->(ap:ANNOUNCED_PREFIX)
      -[:ROUTES]->(asn:ASN)-[:HAS_NAME]->(n:ASN_NAME)
RETURN ip.name AS ip, ap.name AS prefix, asn.name AS asn, n.name AS operator
LIMIT 20

Or query Whisper from your own LLM workflow via the Whisper MCP server.