# IP Intelligence Briefing: 20.184.135.193/32
Classification: LOW RISK | Intel Date: 2026-08-13
## Executive Summary
20.184.135.193 is a Microsoft Azure cloud infrastructure address with minimal threat indicators. The IP maintains a risk score of 0 and is associated with Microsoft Corporation (ASN 8075). No active threat activity or malicious campaigns detected.
## Ownership and Infrastructure
- Organization: Microsoft Corporation (MSFT)
- ASN: 8075
- CIDR Block: 20.180.0.0/14
- Network Role: Cloud Compute (Microsoft Azure)
- RIR: ARIN
## Geolocation
- Country: United States (US)
- Region: California (CA)
- City: San Francisco
- Coordinates: 37.78°N, -122.42°W
## Network Services and DNS
- Open Ports: None detected
- DNS Status: Forward resolution not confirmed
- PTR Records: None available
- Service State: Firewalled / No Services exposed
## Threat Assessment
- Risk Score: 0
- Abuse Confidence Score: None
- Blacklist Status: Clean (0/8 threat feeds)
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Campaign Affiliation: None detected
- Threat Persistence: 0 days observed
## Neighborhood Analysis
The /24 subnet (20.184.135.0.0/24) shows:
- Abuse Density: 0 (clean classification)
- Total Siblings: 2 active
- Threat Siblings: 0
- Notable Neighbor: 20.184.135.195 (risk score: 25, authority score: 50)
## Observation History
Fifteen observations recorded. Recent signals (August 13, 2026) consistently identify:
- Cloud infrastructure classification (Microsoft Azure)
- Stable geolocation in San Francisco, CA
- Minimal operator score (0.1304)
- No threat listings or campaign correlations
## Recommended Actions
No firewall blocking or mitigation required. The IP address operates within expected Microsoft Azure infrastructure parameters and shows no deviation from baseline behavior.
Status: Monitor only - No immediate action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.180.0.0/14 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 13% | 1 | 1 |
| Overall | 21% | 9 | 13 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-29 22:50:08 UTC |
| Last Seen | 2026-08-13 00:12:10 UTC |
| Profile Built | 2026-08-13 00:22:53 UTC |
| Data Freshness | Live |
| Signal Types | 15 |
| Total Observations | 16 |
Full dossier details are available via our API.