We have outgoing traffic from an IP address belonging to Microsoft with a bad reputation "13.107.4.50", is it malicious?

Question

Hello everyone, we regularly ingest indicators of compromise into our threat protection systems from different intelligence sources. We noticed that there is an IP address belonging to Microsoft/Azure "13.107.4.50", which according to these sources belongs to the "BlackByte" threat. We have been investigating on some sites where they describe that this address belongs to Microsoft update services, however in other cases they mention that it is known as a malware spreader. Has anyone dealt with this case? Could you help us with the verdict to know if we have to block or allow this IP? Thanks and regards!