So MSFT is a lager network of IPs than most of IP holders out there.
What I have been observing since as far back as 2019 is that a set of 7 IPs, all from different /24s swarm on of the sites I manage.
6 - 10 seconds a part, so it kind of Blends(:)) in general traffic.
Only 7 IPs,
104.41.225.47
104.41.228.253
13.69.199.207
13.79.160.159
40.113.85.123
40.127.111.29
50.105.130.232
...all with the same UA: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko
The pages(URIs) the go after are(or were - in some cases) - 10 pages - linked from Home page at some point.
Each URI is requested several times from the same IP over the time period of half hour, and then they STOP for several month.
- Then comeback fro the same OLD URIs.
What Gives?