20.215.65.170
## INTELLIGENCE BRIEFING: 20.215.65.170/32
Classification: LOW RISK – Cloud Infrastructure (Microsoft Azure)
Date: 2026-08-04
---
OWNERSHIP & INFRASTRUCTURE
Organization: Microsoft Corporation (AS8075)
Network: MSFT, 20.192.0.0/10 (ARIN)
Infrastructure Type: CloudCompute (Microsoft Azure)
Geolocation: US (Warsaw, Mazovia region)
Route Stability: Stable (isMoAS: false, 30-day route changes: 0)
DNSSEC: Valid
RISK PROFILE
Overall Risk Score: 0/100 (Low Risk)
Abuse Confidence: Null
Blacklist Status: Clean (0 listings)
Threat Indicators: None detected
Classification Flags:
- Cloud: ✅ True
- CDN: ❌ False
- VPN/Proxy/Tor: ❌ False
- Hosting: ✅ True
- Mobile/Residential: ❌ False
- Bogon: ❌ False
NETWORK SERVICES
Open Ports: None detected
HTTP/TLS Services: None
Certificate Authority: No certificates associated
DNS Resolution: No PTR records, no forward resolution
THREAT OBSERVATIONS
Campaign Association: None
Known Threat Feeds: None
Honeypot Hits: 0
Malicious Activity: None observed
NEIGHBORHOOD ANALYSIS (20.215.65.0/24)
Abuse Density: 0 (Clean)
Subnet Classification: Clean
Total Sibling IPs: 3
Threat Siblings: 0
Neighbor Risk Distribution:
- High Risk: 0
- Medium Risk: 0
- Low Risk: 2 (20.215.65.5, 20.215.65.22)
Assessment: No malicious activity observed in the /24 subnet. Neighbor IPs show minimal risk scores (25) with authority scores of 50, consistent with legitimate Azure infrastructure.
OBSERVATION HISTORY
Total Observations: 18 signals
Most Recent Activity: 2026-08-04
Threat Persistence: 0 days
Ownership Changes: 0
Signal Summary:
- Cloud infrastructure classification confirmed
- No blacklist listings detected
- Certificate enumeration: 0 certificates
- Reputation: Minimal/neutral across all signals
NETWORK BEHAVIOR
Traceroute Analysis:
- Hop Count: 24
- First Hop RTT: 0.3ms
- Last Hop RTT: 110.4ms
- Transit Networks: Comcast
Control Plane:
- BGP Origin: 8075 (AS)
- Prefix: 20.192.0.0/10
- RPKI State: Not reported
- IRR Consistency: Not reported
SECURITY RECOMMENDATIONS
Action Required: None
Firewall Rules: Not recommended (legitimate cloud infrastructure)
Justification:
- IP belongs to Microsoft Azure cloud infrastructure
- No threat indicators or malicious activity observed
- Clean neighborhood classification
- No blacklist listings
- Standard enterprise cloud provider with established routing
SOC Analyst Guidance:
This IP represents legitimate Microsoft Azure cloud infrastructure. No defensive actions required. Standard allow rules for Microsoft traffic apply. Monitor for any behavioral changes if unusual activity patterns emerge from this IP in your environment.
---
Source: IPDebrief Intelligence Platform
Classification: DEFENSIVE SECURITY INTELLIGENCE
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 20.192.0.0/10 |
| Route mapping | Found |
| Certificates in transparency logs | 0 certificates |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 28% | 2 | 5 |
| routing | 17% | 2 | 3 |
| services | 12% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 16% | 1 | 3 |
| geolocation | 17% | 2 | 3 |
| Overall | 18% | 11 | 19 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 11:16:16 UTC |
| Last Seen | 2026-09-13 15:06:40 UTC |
| Profile Built | 2026-09-13 15:11:48 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 34 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 20.215.65.170
Who owns the IP address 20.215.65.170?
20.215.65.170 is registered to Microsoft Corporation. The address falls within the 20.192.0.0/10 network block. Registration is held at ARIN.
Where is 20.215.65.170 located?
Geolocation data places 20.215.65.170 in Warsaw, MZ, Poland. The local time zone is Europe/Warsaw. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 20.215.65.170 malicious or safe?
20.215.65.170 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
Is 20.215.65.170 a VPN, proxy, or data center address?
20.215.65.170 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.