20.220.146.147📋 Copy

IP Intelligence Briefing: 20.220.146.147

Date: 2026-06-14

---

**1. Profile Summary**

• Risk Score: Low (25/100) | Provider Score: 0 | Authority Score: 0
• Ownership: Microsoft Corporation (AS8075) | Network Role: Microsoft Azure Cloud Compute
• Geolocation:

- Primary: Toronto, Ontario, Canada (43.65°N, -79.38°W)

- Conflicting Data: One observation incorrectly labeled the IP as "US" with coordinates 37.751°N, -97.822°W.

• Threat Indicators: No active malicious indicators detected. Historical data (June 5, 2026) shows "has_threats": true in one observation, but no current campaign or abuse reports.

---

**2. Observation History**

• Last 30 Days:

- Geolocation: Stable at Toronto, Canada, with 150km accuracy radius.

- Network Role: Consistently identified as Microsoft Azure (cloud compute, no residential/mobile).

- Threat Signals: One ambiguous "pulse" detection (2 threats) from AlienVault OTX, but no confirmed malicious activity.

- Stability: No changes in ownership or network classification.

---

**3. Relationships & Network**

• Linked Entities:

- Microsoft Azure Network (MSFT): Multiple relationships confirm the IP is part of Microsoft’s infrastructure.

- No External Connections: No subnets, hostnames, or organizations linked beyond Microsoft.

• Subnet: 20.220.146.147/24 | Abuse Density: 0 (no risky neighbors detected).

---

**4. Key Findings & Recommendations**

• Legitimate Infrastructure: The IP is part of Microsoft Azure, a trusted cloud provider. No evidence of spoofing or misclassification in recent data.
• Geolocation Discrepancy: One observation incorrectly labeled the IP as "US" with San Francisco coordinates. Investigate potential data anomalies or misconfigurations.
• Threat Ambiguity: Historical "pulse" detections may indicate false positives or benign cloud activity. Monitor for changes in threat signals.
• Actionable Steps:

- Validate geolocation inconsistencies with Microsoft’s network documentation.

- Continuously monitor for unexpected DNS or service changes (no open ports or TLS certs detected).

- No immediate mitigation required, but retain monitoring due to ambiguous historical data.

---

Conclusion: 20.220.146.147 is a low-risk Microsoft Azure server with no active malicious indicators. Address geolocation discrepancies and monitor for unexpected behavior.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.