20.193.250.198📋 Copy

# IP Intelligence Briefing: 20.193.250.198

## Executive Summary

IP 20.193.250.198 is a Microsoft Azure cloud infrastructure endpoint with moderate risk rating (65/100). The IP operates within Microsoft's cloud computing environment and exhibits typical web server characteristics with some DNSBL reputation concerns.

## Ownership and Infrastructure

• Organization: Microsoft Corporation (ASN: 8075)
• Network Role: Cloud Compute (Microsoft Azure)
• Infrastructure Type: Cloud Compute
• BGP Prefix: 20.192.0.0/10
• Route Stability: Unstable

## Geolocation Data

• Consensus Country: United States (US)
• Coordinates: Pune, MH (India region)
• GeoConsensus: False (multiple conflicting sources)
• Accuracy Radius: 2,500 km
• Note: Geographic inconsistencies detected between reported country and coordinate data.

## Threat Posture

• Overall Risk Score: 65 (Moderate Risk)
• Abuse Confidence Score: Not explicitly scored
• DNSBL Status: Listed on 3 of 8 threat feeds
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Campaign Correlation: None detected

## Network Services

• Open Ports:

- TCP/80 (HTTP)

- TCP/443 (HTTPS)

- TCP/22 (SSH)

• Server Software: nginx/1.18.0 (Ubuntu)
• TLS Certificate: Let's Encrypt (CN=admin.gaonkari.com)
• HTTP2 Support: Enabled

## Neighborhood Analysis

• Subnet: 20.193.250.198/24
• Abuse Density: 0.5
• Classification: Mostly Clean
• Total Siblings: 2
• Active Siblings: 2
• Threat Siblings: 1
• Neighbor Risk: 20.193.250.100 (Risk Score: 25)

## Historical Signals

Recent observations (within last 30 days) indicate:

• Cloud infrastructure classification consistent (Microsoft Azure)
• DNSBL listings present with high severity ratings
• Geographic data inconsistencies persist across probes
• No persistent malicious threat pattern detected

## Recommended Actions

Based on the risk profile and DNSBL listings, the following security measures are recommended:

1. DNSBL Monitoring: Investigate the 3 DNSBL listings for potential policy violations or misconfiguration

2. TLS Certificate Review: Certificate subject (admin.gaonkari.com) warrants verification against expected domain usage

3. SSH Access: TCP/22 port is open on cloud infrastructure—confirm legitimate administrative access requirements

4. Geolocation Discrepancy: Investigate why coordinates (Pune, India) differ from reported country (US)

## Classification

This IP represents standard Microsoft Azure cloud infrastructure with elevated DNSBL reputation. The moderate risk score (65) reflects the presence of blacklist listings rather than active malicious activity. Monitor for changes in DNSBL status and TLS certificate usage patterns.

---

*Data compiled from IPDebrief intelligence platform. Analysis timestamp: 2026-06-26*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.