20.40.222.208
IP Intelligence Briefing: 20.40.222.208/32
Classification: LOW RISK — Microsoft Azure Cloud Infrastructure
Ownership & Infrastructure
IP 20.40.222.208 belongs to Microsoft Corporation (ASN 8075, MSFT) within the Microsoft Azure cloud network. The IP resides in CIDR block 20.33.0.0/16, registered with ARIN. Geolocation data places the IP in Des Moines, Iowa, United States. The infrastructure operates as CloudCompute with no identified proxy, CDN, VPN, or Tor exit node characteristics.
Risk Profile
Current risk score: 25 (Low Risk). Provider score: 0, Authority score: 0. The IP shows no active threat indicators: no blacklist listings, no known attacker flags, no spam source designation, and zero abuse confidence score. DNSBL listing count is 1 out of 8 total lists.
Network Behavior
Network role classification shows "Firewalled / No Services" with zero open ports detected. No TLS certificates, HTTP titles, or server banners were observed. Forward DNS resolution is not confirmed, and no PTR hostnames exist. The IP is not classified as bogon, mobile, residential, or hosting infrastructure.
Control Plane & Routing
BGP prefix: 20.40.0.0/13. Origin ASN: 8075. Route stability: false (route changes detected in 30-day window). DNSSEC is valid. RPKI state and IRR consistency data unavailable.
Temporal Signals
Observation history contains 19 recorded observations. Recent subnet classification (20.24.222.208/24) indicates "mostly_clean" status with abuse density of 1. Inherited risk score: 2. Total sibling IPs: 1, with 1 active sibling and 1 threat sibling.
Relationship Graph
Eight relationships were identified, all classified as "Same Network" with target MSFT. No external relationships to hostnames, organizations, or certificates were detected.
Subnet Neighborhood (20.40.222.0/24)
Abuse density: 0. Neighbor count: 0. Risk distribution: zero high, medium, or low risk neighbors. Classification: mostly_clean. Inherited risk: 2.
Recommended Actions
No security actions or firewall rules recommended. The IP presents as legitimate Microsoft Azure infrastructure with no active malicious indicators.
Summary
IP 20.40.222.208 is Microsoft Azure cloud infrastructure with a low-risk profile. No threat indicators, no open services, and no associated malicious activity were detected. Standard monitoring is appropriate; no blocking or filtering required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 24% | 1 | 3 |
| geolocation | 19% | 1 | 2 |
| Overall | 21% | 9 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-23 20:05:38 UTC |
| Last Seen | 2026-08-12 18:00:52 UTC |
| Profile Built | 2026-08-12 18:10:24 UTC |
| Data Freshness | Live |
| Signal Types | 18 |
| Total Observations | 19 |
Full dossier details are available via our API.