# 52.123.251.21 — IP Intelligence Summary

52.123.251.21 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Redmond, United States. It belongs to datacenter or hosting infrastructure. As of October 30, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/52.123.251.21
- Last updated: 2026-10-30

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 52.120.0.0/14
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN

## Location

- City: Redmond
- Region: WA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https
- 8443/tcp — https-alt

## Analyst narrative

The IP address 52.123.251.21 was attributed to Microsoft Corporation (ASN 8075) within the 52.120.0.0/14 block, registered in Redmond, Washington. Ownership records indicated the host functioned as a Web Server, with active listening on ports 80, 443, and 8443. TLS certificate analysis confirmed issuance by DigiCert Inc for Outlook.com and Microsoft Corporation domains.

The assessment assigned a Low Risk reputation score of 25. However, intelligence gathered noted signal contradictions between claimed geolocation and physical RTT measurements, recording an average response time of 31.4ms against a minimum possible 127.6ms for the reported distance. The address was listed on one of eight observed DNS blacklists. Neighborhood analysis classified the subnet as mixed with an abuse density of 0.2162, including 24 threat siblings among 110 active siblings. Behavioral logs showed no active attacker status, but the threat actor classification

## Nearby addresses

- 52.123.251.0 (https://ipdebrief.com/52.123.251.0)
- 52.123.251.1 (https://ipdebrief.com/52.123.251.1)
- 52.123.251.3 (https://ipdebrief.com/52.123.251.3)
- 52.123.251.4 (https://ipdebrief.com/52.123.251.4)
- 52.123.251.9 (https://ipdebrief.com/52.123.251.9)
- 52.123.251.10 (https://ipdebrief.com/52.123.251.10)
- 52.123.251.11 (https://ipdebrief.com/52.123.251.11)
- 52.123.251.12 (https://ipdebrief.com/52.123.251.12)
- 52.123.251.13 (https://ipdebrief.com/52.123.251.13)
- 52.123.251.14 (https://ipdebrief.com/52.123.251.14)
- 52.123.251.16 (https://ipdebrief.com/52.123.251.16)
- 52.123.251.17 (https://ipdebrief.com/52.123.251.17)

---

Source: IPDebrief, "52.123.251.21 IP intelligence", https://ipdebrief.com/52.123.251.21, updated 2026-10-30. Assessments are probabilistic.