IP Intelligence Briefing: 20.204.136.58
Date: 2026-06-10
---
**1. Profile Summary**
- Risk Score: 50 (Moderate Risk)
- Provider: Microsoft Corporation (AS8075)
- Geolocation: United States (geo-plausible, 2500km accuracy radius)
- Network Role: Microsoft Azure CloudCompute (firewalled, no open services)
- Threat Indicators: No malicious activity detected; no blacklists, spam, or known attacker associations.
---
**2. Observation History (30 Days)**
- Total Observations: 15
- Key Trends:
- 1 threat observation (low confidence) from June 1, 2026.
- No persistent malicious behavior; no repeated scans or scans.
- BGP stability: Route changes = 0, stability score = 0.13.
---
**3. Relationships**
- Linked Entities:
- Microsoft Azure network (AS8075).
- No DNS, hostnames, or certificates associated.
- No known campaigns or threat feeds.
---
**4. Neighborhood Analysis**
- Subnet: 20.204.136.58/24
- Abuse Density: 0.5 (mostly clean, 1 risky neighbor).
- Neighbors:
- 20.204.136.73: Moderate risk (score 50).
---
**5. Threat Assessment**
- Likelihood of Compromise: Low.
- Actionable Indicators:
- Monitor subnet for increased scan activity or abnormal traffic.
- Verify neighbor 20.204.136.73 for potential lateral movement risks.
- Recommendations:
- Allow traffic from Microsoft Azure (AS8075) as legitimate infrastructure.
- Block or monitor traffic from 20.204.136.73 if it deviates from expected patterns.
---
Conclusion:
This IP is part of Microsoftβs Azure cloud infrastructure with no active threats. The moderate risk score reflects the networkβs association with a large ISP, but no malicious activity is observed. Focus on monitoring the subnetβs neighbors for anomalies.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No β PTR hostname does not resolve back to this IP (weak signal) |
π DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 37% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 8% | 1 | 1 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 22% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-24 00:32:05 UTC |
| Last Seen | 2026-06-28 23:18:46 UTC |
| Profile Built | 2026-06-29 05:20:02 UTC |
| Data Freshness | Live |
| Signal Types | 17 |
| Total Observations | 19 |
Full dossier details are available via our API.