# 52.123.249.40 — IP Intelligence Summary

52.123.249.40 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Redmond, United States. It belongs to datacenter or hosting infrastructure. As of October 29, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/52.123.249.40
- Last updated: 2026-10-29

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 52.120.0.0/14
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN

## Location

- City: Redmond
- Region: WA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https
- 8443/tcp — https-alt

## Analyst narrative

IP 52.123.249.40/32 was identified as Microsoft Corporation infrastructure (ASN 8075) within the 52.120.0.0/14 block. The system presented a low-risk profile with a risk score of 25 and was classified as cloud compute hosting a web server. Active services were observed on ports 80, 443, and 8443, utilizing TLS certificates issued by DigiCert Global G2 for outlook.com.

Geolocation data indicated Redmond, WA, US, though RTT measurements contradicted this claim. Analysis showed a distance of approximately 7702km with an RTT of 86ms, which fell below the minimum possible threshold for that distance.

The neighborhood context revealed 6 threat siblings within the 52.123.249.0.0/24 subnet, though the immediate asset remained classified as mostly clean. Behavioral logs recorded zero honeypot hits or enumeration strikes. No known malicious campaigns were associated with the address. Due to signal contradictions and neighborhood threat presence, the profile recommended monitoring actions with low severity.

## Nearby addresses

- 52.123.249.0 (https://ipdebrief.com/52.123.249.0)
- 52.123.249.1 (https://ipdebrief.com/52.123.249.1)
- 52.123.249.2 (https://ipdebrief.com/52.123.249.2)
- 52.123.249.3 (https://ipdebrief.com/52.123.249.3)
- 52.123.249.4 (https://ipdebrief.com/52.123.249.4)
- 52.123.249.6 (https://ipdebrief.com/52.123.249.6)
- 52.123.249.7 (https://ipdebrief.com/52.123.249.7)
- 52.123.249.8 (https://ipdebrief.com/52.123.249.8)
- 52.123.249.10 (https://ipdebrief.com/52.123.249.10)
- 52.123.249.11 (https://ipdebrief.com/52.123.249.11)
- 52.123.249.12 (https://ipdebrief.com/52.123.249.12)
- 52.123.249.13 (https://ipdebrief.com/52.123.249.13)

---

Source: IPDebrief, "52.123.249.40 IP intelligence", https://ipdebrief.com/52.123.249.40, updated 2026-10-29. Assessments are probabilistic.