20.226.124.83
IP Intelligence Briefing: 20.226.124.83
Date: 2026-06-01
---
**1. Core Profile**
- Risk Score: Moderate (50/100)
- Provider: Microsoft Corporation (ASN 8075)
- Network Role: Microsoft Azure CloudCompute
- Geolocation:
- Reported: Campinas, Brazil (US region flag)
- Validation: ICMP blocked; geo-plausible via cymru-country (US, 39.83°N, -98.58°W)
- Distance Discrepancy: 9,854 km from probe (potential misattribution or routing anomaly).
- Threat Status: Clean (no indicators, abuse density 0, no malicious campaigns).
---
**2. Network Behavior**
- Subnet: 20.226.124.83/24
- Neighbor Risk: 1 sibling IP (20.226.124.145) with low risk (25/100).
- Subnet Abuse: 0% abuse density; no threat siblings.
- BGP:
- Prefix: 20.192.0.0/10 (Microsoft-owned).
- Route Stability: Unstable (route changes in 30 days).
- Control Plane:
- DNSSEC valid; no CAA records.
- RPKI state: Not validated; IRR consistency: Unknown.
---
**3. Historical Observations**
- Stability: Ownership unchanged (0 changes).
- Threat Trends: No persistent malicious activity (threat observation count: 0).
- Geolocation Shifts:
- Confirmed US origin via cymru-country (39.83°N, -98.58°W).
- Traceroute inconsistency: ICMP blocked, inferred location Campinas, Brazil.
---
**4. Relationships & Context**
- Linked Entities:
- Subnet: MSFT (Microsoft Azure).
- No hostnames, certificates, or email auth records.
- Services: No open ports, TLS certs, or HTTP banners detected.
---
**5. Recommendations**
- Monitor Geolocation Discrepancy: Investigate why ICMP is blocked and reconcile the US/Brazil location conflict.
- Check Subnet Activity: Despite low risk, monitor 20.226.124.145 for anomalies.
- Validate Ownership: Confirm Microsoft’s control over 20.226.124.83/24 via ARIN/RDAP.
- Firewall Rules: Allow traffic to this IP if it’s a legitimate Azure resource, but restrict unnecessary access.
Conclusion: This IP is a Microsoft Azure resource with no current malicious indicators. The geolocation inconsistency and ICMP block warrant further investigation to rule out misattribution or network misconfigurations.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Single-Service Host |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 22 | ssh | tcp | |
| Closed Ports | 25, 80, 443, 3389, 8080, 8443 (1 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
| SSH Version | SSH-2.0-OpenSSH_9.6p1 Ubuntu-3ubuntu13.16 |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 3 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 13% | 1 | 2 |
| geolocation | 24% | 2 | 3 |
| Overall | 20% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-05-29 12:04:52 UTC |
| Last Seen | 2026-06-29 06:25:26 UTC |
| Profile Built | 2026-06-29 06:33:11 UTC |
| Data Freshness | Live |
| Signal Types | 20 |
| Total Observations | 21 |
Full dossier details are available via our API.