20.240.254.167
## IP Intelligence Briefing: 20.240.254.167/32
Overview
IP 20.240.254.167 is assigned to Microsoft Corporation (ASN 8075, MSFT) within the 20.192.0.0/10 block. The address is classified as a Microsoft Azure cloud compute infrastructure endpoint with no open services or ports. Current risk assessment: Moderate Risk (Score: 50/100).
Threat Assessment
- Risk Profile: Moderate Risk (50/100)
- Threat Indicators: No known campaigns, not classified as known attacker, spam source, or Tor exit node
- Blacklist Status: Listed on 2 of 8 DNSBLs; DNSBL listed count: 2
- Abuse Confidence: No active threat indicators detected
- Infrastructure Type: CloudCompute (Microsoft Azure)
Network Context
- Ownership: Microsoft Corporation (ASN 8075)
- Geolocation: Stockholm, Sweden (SE)
- Subnet: 20.240.254.0/24
- Neighborhood Analysis: Subnet classified as clean with 0% abuse density. One sibling IP (20.240.254.144) detected with risk score 25/100. No threat siblings present.
Service Analysis
- Open Ports: None detected
- DNS Resolution: No PTR hostnames, no forward resolution
- Hosting Status: Active hosting detected
- Control Plane: DNSSEC valid, operator score minimal (0.1304)
Historical Observations
17 signal observations recorded. Most recent activity (2026-08-13) shows Stockholm geolocation with multi-signal inference confidence of 0.56. DNSSEC operator score remains minimal across observations. No persistent malicious behavior detected.
Intelligence Assessment
This IP represents legitimate Microsoft Azure infrastructure with no evidence of abuse or malicious activity. The moderate risk score reflects standard cloud hosting classification rather than active threat behavior. DNSBL listings appear to relate to infrastructure reputation rather than malicious activity.
Recommended Actions
No immediate blocking or firewall rules required. Continue standard monitoring. No correlation to known threat campaigns or related malicious IPs.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.192.0.0/10 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 36% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Mostly Consistent (80%) — 1 contradiction(s) |
| Attribution | Low (35%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-29 22:50:09 UTC |
| Last Seen | 2026-08-13 00:14:55 UTC |
| Profile Built | 2026-08-13 00:22:53 UTC |
| Data Freshness | Live |
| Signal Types | 19 |
| Total Observations | 20 |
Full dossier details are available via our API.