20.239.65.189📋 Copy

IP Intelligence Briefing: 20.239.65.189

Date: 2026-06-07

---

**1. Core Profile**

• Reputation: Moderate Risk (Risk Score: 50)
• Ownership: Microsoft Corporation (ASN 8075, ARIN-regulated)
• Geolocation: Hong Kong (HK), Latitude 22.31, Longitude 113.91
• Network Role: Microsoft Azure cloud infrastructure (firewalled, no public services)

---

**2. Threat Indicators**

• DNSBL Listings: Identified in 2/8 DNSBLs (moderate risk).
• Historical Activity:

- Observed in 16 signals over 30 days (1 DNSBL listing on 2026-06-01).

- No active threats, spam, or known attacker campaigns.

---

**3. Network Relationships**

• Linked Entities:

- Subnet: `20.239.65.189/24` (MSFT-owned).

- No external hostnames or certificates tied to this IP.

• Subnet Analysis:

- Abuse density: 1/100 (mostly clean).

- No active neighbors detected.

---

**4. Behavioral Context**

• Cloud Infrastructure: Likely Microsoft Azure, given ownership and network role.
• DNSSEC Valid: True.
• Routing Stability: BGP route stability flagged as "unstable" (potential ISP/peering issues).

---

**5. Recommendations**

• Monitor DNSBL Listings: Investigate why this IP is listed in 2 DNSBLs (e.g., spam, phishing).
• Verify Cloud Usage: Confirm if this IP is part of legitimate Azure services or a compromised cloud instance.
• Check Subnet Activity: Despite low abuse density, monitor for unexpected traffic patterns in the `20.239.65.189/24` subnet.
• Firewall Rules: Consider blocking DNSBL-listed IPs in outbound rules to mitigate potential spam risks.

---

Note: No immediate mitigation required, but ongoing monitoring is advised due to DNSBL associations and subnet-level risks.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.