207.46.13.111
207.46.13.111 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Quincy, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name msnbot-207-46-13-111.search.msn.com. As of October 8, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
## Threat Intelligence Briefing: 207.46.13.111/32
Classification: LOW RISK - Authorized Infrastructure
Date: Current Analysis
Analyst: IPDebrief Intelligence Team
Executive Summary
IP address 207.46.13.111 was identified as Microsoft Corporation infrastructure within the Microsoft Azure cloud environment. The IP exhibits low risk characteristics with no malicious indicators detected. The address is associated with Microsoft's MSN bot crawler infrastructure and operates from Microsoft's global network in Quincy, WA, US.
Network Profile
- Owner: Microsoft Corporation (AS8075)
- Network Block: 207.46.0.0/16 (MICROSOFT-GLOBAL-NET)
- Infrastructure Type: CloudCompute (Microsoft Azure)
- Geolocation: Quincy, Washington, United States (47.23°N, -119.85°W)
- DNS Resolution: msnbot-207-46-13-111.search.msn.com
- Service Status: Firewalled / No Open Services Detected
Risk Assessment
| Metric | Value | Status |
|---|---|---|
| Risk Score | 25 | Low Risk |
| Authority Score | 0 | N/A |
| Abuse Confidence | None | Clean |
| Blacklist Count | 0 | Not Listed |
| ISP/Provider Score | 0 | N/A |
Threat Indicators
No threat indicators were identified during analysis:
- No known attacker associations
- No spam source activity
- No Tor exit node activity
- No malicious campaign correlations
- No known threat feed matches
Neighborhood Analysis
The /24 subnet (207.46.13.0/24) was analyzed:
- Total Neighbors: 41
- Abuse Density: 0%
- Classification: Mostly Clean
- Risk Distribution: 0 High, 1 Medium, 40 Low
The subnet demonstrates Microsoft's typical Azure infrastructure pattern with minimal abuse activity.
Observation History
Analysis of 24 observations confirms consistent infrastructure behavior:
- Recent geolocation signals (2026-08-04) confirm US/WA/Quincy placement
- DNS resolution to msn.com domain confirmed
- Traceroute analysis successfully traced to target
- No malicious signal patterns observed
- Ownership stable with no recent changes
Recommended Actions
Firewall/Security Rules:
- No blocking recommended
- Allow standard outbound traffic
- Monitor for unusual traffic patterns (standard best practice)
SOC Monitoring:
- No active threat indicators
- Standard traffic monitoring sufficient
- No specific IP reputation flags requiring immediate action
Intelligence Notes
This IP belongs to Microsoft's legitimate bot crawler infrastructure (MSN Bot). The hostname pattern "msnbot-207-46-13-111.search.msn.com" is consistent with Microsoft's search indexing operations. The IP should be treated as trusted infrastructure with standard monitoring protocols.
---
Status: APPROVED FOR TRAFFIC
Confidence Level: High - Multiple data points confirm legitimate Microsoft infrastructure
Next Review: Standard periodic review
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MICROSOFT-GLOBAL-NET |
| CIDR Block | 207.46.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | msnbot-207-46-13-111.search.msn.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | msnbot-207-46-13-111.search.msn.com |
🔐 DNS Hygiene
| Hygiene Score | 80% (Excellent) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 207.46.0.0/19 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 22% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 19% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 18% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-02 04:21:38 UTC |
| Last Seen | 2026-10-08 02:48:11 UTC |
| Profile Built | 2026-10-08 02:49:09 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 28 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 207.46.13.111
Who owns the IP address 207.46.13.111?
207.46.13.111 is registered to Microsoft Corporation. The address falls within the 207.46.0.0/16 network block. Registration is held at ARIN.
Where is 207.46.13.111 located?
Geolocation data places 207.46.13.111 in Quincy, WA, United States. The local time zone is America/Los_Angeles. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 207.46.13.111 malicious or safe?
207.46.13.111 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 207.46.13.111?
The reverse DNS (PTR) record for 207.46.13.111 is msnbot-207-46-13-111.search.msn.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 207.46.13.111 a VPN, proxy, or data center address?
207.46.13.111 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.