20.235.86.97📋 Copy

# IP INTELLIGENCE BRIEFING

Target IP: 20.235.86.97/32

Report Date: 2026-06-18

Classification: Microsoft Azure Cloud Infrastructure

## EXECUTIVE SUMMARY

IP 20.235.86.97 is identified as Microsoft Corporation cloud infrastructure (ASN 8075) located in Pune, Maharashtra, India. The IP carries a LOW RISK score of 25 and is classified as Microsoft Azure CloudCompute infrastructure. No active threat indicators, blacklists, or malicious campaigns were detected.

## OWNERSHIP & INFRASTRUCTURE

• Organization: Microsoft Corporation (ASN 8075)
• Network Role: Microsoft Azure Cloud Compute
• Infrastructure Type: Cloud infrastructure (verified)
• RIR: ARIN
• BGP Prefix: 20.192.0.0/10
• Route Stability: Unstable (flagged as false)

## GEOLOCATION

• Country: India (IN)
• Region: Maharashtra (MH)
• City: Pune
• Coordinates: 18.58°N, 73.92°E
• Geolocation Confidence: High (plausible)
• Validation Status: ICMP blocked - unable to validate

## THREAT ANALYSIS

• Risk Score: 25/100 (Low Risk)
• Abuse Confidence: Not applicable
• Blacklist Count: 0
• Known Attacker: No
• Spam Source: No
• Tor Exit Node: No
• Active Threat Indicators: None detected
• Known Campaigns: None

## NETWORK SERVICES

• Open Ports: None detected
• TLS Certificate: None
• HTTP Services: None
• Service Banner: None
• DNS Records: No PTR hostnames, no forward resolution
• Email Authentication: No SPF/DMARC configured

## OBSERVATION HISTORY

Analysis of 20 historical observations reveals consistent Microsoft infrastructure signals:

• Recent Activity: Observations recorded on 2026-06-14 and 2026-06-18
• Geographic Consistency: All geo-signals consistently resolve to Pune, India
• Operator Score: 0.1304 (Minimal risk level)
• Threat Persistence: 0 days (transient)
• Ownership Changes: 0 (stable)

## NETWORK RELATIONSHIPS

• Total Relationships: 24
• Relationship Type: Same Network (MSFT/Microsoft)
• Classification: All relationships indicate Microsoft infrastructure

## SUBNET ANALYSIS (20.235.86.0/24)

• Subnet Classification: Mostly Clean
• Abuse Density: 1
• Total Sibling IPs: 1
• Active Siblings: 1
• Threat Siblings: 1
• Inherited Risk: 2

## SECURITY RECOMMENDATIONS

Action: MONITOR (No immediate action required)

• Risk Level: Low (Score 25)
• Recommended Action: Standard cloud infrastructure monitoring
• Firewall Rules: None required
• WAF Rules: None required
• Threat Feeds: No blocking recommended

## ASSESSMENT

This IP address represents legitimate Microsoft Azure cloud infrastructure. The absence of threat indicators, combined with consistent Microsoft network relationships and low-risk classification, indicates normal cloud service operation. No defensive action is required at this time. SOC teams should maintain standard cloud infrastructure monitoring protocols.

---

*Intel generated from IPDebrief platform data. Classification based on current signal analysis.*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.