# 52.159.244.87 — IP Intelligence Summary

52.159.244.87 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Francisco, United States. It belongs to datacenter or hosting infrastructure. As of October 8, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/52.159.244.87
- Last updated: 2026-10-08

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 52.145.0.0/16
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: San Francisco
- Region: CA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Analyst narrative

\## IP Intelligence Briefing: 52.159.244.87/32

**Date:** 2026-08-11

**Subject:** Microsoft Azure Infrastructure IP Analysis

**Classification:** LOW RISK / CLEAN

\---

\### Executive Summary

IP address 52.159.244.87 is identified as Microsoft Corporation infrastructure within the MSFT network block (52.145.0.0/16). The address shows no malicious indicators, maintains a risk score of 0, and operates within a clean cloud computing environment on Microsoft Azure. No security action is recommended for this IP.

\---

\### Infrastructure Profile

| Attribute | Value |

|-----------|-------|

| **IP Address** | 52.159.244.87 |

| **Risk Score** | 0 |

| **Provider Score** | 0 |

| **Authority Score** | 0 |

| **ASN** | 8075 (Microsoft Corporation) |

| **Organization** | MSFT |

| **Geolocation** | San Francisco, CA, US |

| **Infrastructure Type** | CloudCompute (Microsoft Azure) |

| **Network Classification** | Legitimate Cloud Provider |

\---

\### Threat Assessment

**Threat Indicators:** None detected

\- Blacklist count: 0

\- Abuse confidence score: Not applicable (clean profile)

\- Known campaigns: None

\- Threat feeds: No associations

**Network Role:**

\- Provider: Microsoft Azure

\- Is Cloud: Yes

\- Is CDN: No

\- Is Hosting: Yes

\- Is Proxy/VPN/Tor: No

\- Service Purpose: Firewalled / No Services

\---

\### Neighborhood Analysis (52.159.244.0/24)

**Subnet Statistics:**

\- Abuse Density: 0 (clean)

\- Total Siblings: 10

\- Active Siblings: 8

\- Threat Siblings: 1 (low-risk infrastructure)

**Neighbor Risk Distribution:**

\- High Risk: 0

\- Medium Risk: 0

\- Low Risk: 9

All neighboring IPs in the /24 subnet maintain low-risk profiles with authority scores of 50, indicating legitimate Microsoft infrastructure deployment.

\---

\### Historical Observations

**Observation Count:** 21 total signals recorded

\- Recent activity (2026-08-11): Minimal signal presence

\- Signal confidence: 0.20–0.50 across dimensions

\- Threat persistence: 0 days

\- Is persistently malicious: No

**Temporal Stability:**

\- Ownership changes: 0

\- Average ownership duration: Stable

\- Geo validation: Plausible (ICMP blocked during validation)

\---

\### Operational Capabilities

**DNS Resolution:**

\- PTR hostnames: None

\- Forward resolution: Not confirmed

\- Hosted domains: 0

**Services:**

\- Open ports: None detected

\- TLS certificates: None

\- HTTP services: None exposed

**Control Plane:**

\- Origin ASN: 8075

\- BGP Prefix: 52.152.0.0/13

\- DNSSEC: Valid

\- Route stability: False (expected for cloud infrastructure)

\---

\### Recommended Actions

**Security Posture:** No action required

\- Risk score: 0

\- No firewall rules recommended

\- No WAF/IPS rules needed

**SOC Analyst Notes:**

This IP represents legitimate Microsoft Azure cloud infrastructure with no threat indicators. Traffic from this address should be permitted unless other contextual signals suggest otherwise. The IP operates in a low-abuse-density subnet with no malicious neighbors.

**Classification:** BENIGN / TRUSTED INFRASTRUCTURE

## Nearby addresses

- 52.159.244.64 (https://ipdebrief.com/52.159.244.64)
- 52.159.244.65 (https://ipdebrief.com/52.159.244.65)
- 52.159.244.67 (https://ipdebrief.com/52.159.244.67)
- 52.159.244.71 (https://ipdebrief.com/52.159.244.71)
- 52.159.244.84 (https://ipdebrief.com/52.159.244.84)
- 52.159.244.85 (https://ipdebrief.com/52.159.244.85)
- 52.159.244.88 (https://ipdebrief.com/52.159.244.88)
- 52.159.244.177 (https://ipdebrief.com/52.159.244.177)
- 52.159.244.179 (https://ipdebrief.com/52.159.244.179)

---

Source: IPDebrief, "52.159.244.87 IP intelligence", https://ipdebrief.com/52.159.244.87, updated 2026-10-08. Assessments are probabilistic.