13.89.125.31📋 Copy

## IP Intelligence Briefing: 13.89.125.31/32

Executive Summary

IP 13.89.125.31 is a Microsoft Azure cloud infrastructure address with low-risk classification (Risk Score: 25). The IP operates as part of Microsoft's cloud compute infrastructure and shows no active threat indicators. Network defenders may proceed with standard monitoring protocols.

Profile Overview

• Risk Score: 25 (Low Risk)
• Organization: Microsoft Corporation (ASN 8075)
• Network Name: MSFT
• Infrastructure Type: CloudCompute
• Provider: Microsoft Azure
• Geolocation: Des Moines, IA, US
• BGP Prefix: 13.64.0.0/11

Network Role

The IP is classified as Microsoft Azure infrastructure with no exposed services. Connection type shows "Firewalled / No Services," indicating the IP is behind Microsoft's cloud security perimeter with no publicly accessible ports. DNS resolution confirms cloud infrastructure hosting.

Threat Assessment

• Abuse Confidence Score: Not applicable
• Known Attacker: False
• Spam Source: False
• Tor Exit Node: False
• Blacklist Count: 0
• Threat Feeds: None detected
• Active Campaigns: None

Historical Observations (22 signals)

Recent observation activity (June 15, 2026) confirms consistent Microsoft Azure classification across multiple signal types. Geo-validation showed plausible Des Moines location despite ICMP blocks. The IP maintains stable cloud infrastructure classification with no evidence of behavioral changes indicating malicious activity.

Neighborhood Analysis (13.89.125.0/24)

• Abuse Density: 0.4286 (moderate)
• Total Siblings: 7
• Active Siblings: 4
• Threat Siblings: 3
• Risk Distribution: 2 medium, 4 low, 0 high

The /24 subnet exhibits mixed classification with moderate abuse density. However, the specific IP (13.89.125.31) maintains low-risk status despite neighborhood context. Neighbor IPs show risk scores ranging from 0-40, with no high-risk addresses identified.

Relationship Graph

• DNS Associations: Multiple associations to stretchoid.com hostnames (azpdcsxoq6js.stretchoid.com)
• Network Associations: Multiple MSFT network relationships confirmed
• Total Relationships: 41 identified

The DNS hostname pattern aligns with Microsoft Azure's internal domain naming conventions for cloud infrastructure.

Recommendations

1. Allow Traffic: No blocking recommended for this IP. It represents legitimate Microsoft Azure infrastructure.

2. Monitor: Standard monitoring for Azure traffic patterns applicable.

3. Context: If this IP appears in logs, it likely represents Microsoft service traffic (Azure cloud services, CDN, or other infrastructure services).

4. False Positive Mitigation: IP may be flagged by security tools due to Microsoft's extensive IP ranges. Consider Microsoft's public IP allocation documentation for context.

Conclusion

IP 13.89.125.31 is legitimate Microsoft Azure cloud infrastructure with no threat indicators. No defensive action required beyond standard cloud traffic monitoring.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.