20.104.137.252📋 Copy

# IP Intelligence Briefing: 20.104.137.252

## Executive Summary

IP 20.104.137.252 is a Microsoft Azure cloud compute host with low-risk profile (risk score: 25). No active threat indicators or known malicious campaigns detected. Traffic should be permitted as part of legitimate Microsoft Azure infrastructure operations.

## Infrastructure Classification

• Organization: Microsoft Corporation (AS8075)
• Network: 20.33.0.0/16 (MSFT)
• Location: Quebec, Canada (geoconsensus: true)
• Infrastructure Type: Microsoft Azure CloudCompute
• Service Role: Single-Service Host

## Threat Assessment

• Risk Score: 25/100 (Low Risk)
• Blacklist Count: 0
• Known Campaigns: None
• Tor Exit Node: No
• Known Attacker: No
• Spam Source: No

## Network Context

• Open Ports: TCP/3389 (RDP)
• DNSBL Status: 1/8 lists flagged (minimal operator impact)
• Subnet Abuse Density: 0.00% (clean neighborhood)
• Related Entities: 2 Microsoft network associations identified

## Historical Observation Summary

Analysis of 14 historical observations reveals:

• Consistent Microsoft Corporation ownership attribution
• Geographic signals show Quebec, Canada positioning with plausible RTT metrics (minimum 107.3ms)
• No evidence of persistent malicious behavior or ownership changes
• Recent geolocation validation confirms US coordinates (39.83, -98.58) with confidence score of 0.35

## Recommended Actions

No blocking required. This IP represents legitimate Microsoft Azure infrastructure. Standard cloud traffic permitting rules should apply.

---

Classification: LOW RISK / INFRASTRUCTURE

Reporting: SOC Intelligence Unit

Date: Current Analysis

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.