20.196.204.16📋 Copy

IP Intelligence Briefing: 20.196.204.16

Date: 2026-06-11

---

**1. Core Profile**

• Reputation: Moderate Risk (Risk Score: 50)
• Ownership: Microsoft Corporation (ASN 8075, MSFT)
• Geolocation: Seoul, South Korea (KR) | Latitude 37.57, Longitude 126.98
• Network Role: Microsoft Azure CloudCompute (firewalled, no services exposed)
• Threat Indicators: No active malware, phishing, or scanning detected.

---

**2. Observation History**

• Recent Activity (2026-06-11):

- Listed in 8 DNSBLs (minimal risk score: 0.13).

- DNSSEC validation confirmed.

- No new threat observations or persistence detected.

• Historical Data (2026-06-01):

- No ownership or threat changes recorded.

- Subnet abuse density remains "clean" (0/10).

---

**3. Relationships**

• Linked Entities:

- Same network: Microsoft Corporation (MSFT)

- No connections to hostnames, domains, or certificates.

---

**4. Neighborhood Analysis**

• Subnet: 20.196.204.16/24
• Abuse Density: 0% (clean subnet).
• Neighbors: No active or threatening sibling IPs in the subnet.

---

**5. Control Plane**

• BGP: Prefix 20.192.0.0/10, origin ASN 8075 (Microsoft).
• DNSSEC: Valid.
• Routing: Stable, no recent route changes.

---

**6. Recommendations**

• SOC Action: Monitor for unexpected service exposure or DNS changes.
• Firewall: No immediate blocking required; IP is part of legitimate cloud infrastructure.
• Context: Likely a Microsoft Azure VM in Seoul. No active malicious campaigns or spam sources detected.

---

Conclusion: This IP is associated with Microsoft Azure infrastructure and shows no active malicious behavior. While it appears in minor DNSBLs, the subnet and network role suggest it is a legitimate, low-risk host. Continue monitoring for anomalies.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.