20.64.104.143
IP INTELLIGENCE BRIEFING: 20.64.104.143
---
TARGET OVERVIEW
IP 20.64.104.143 is a Microsoft Azure cloud infrastructure address (AS8075) registered to Microsoft Corporation. The IP resolves to San Antonio, Texas with geolocation confidence of 56% via multi-signal inference.
RISK ASSESSMENT
Current risk score: 25/100 (Low Risk)
- Provider authority: 0 (Microsoft infrastructure)
- Authority score: 0
- No known threat indicators or blacklist associations
- Not classified as Tor exit node, known attacker, or spam source
- No open ports detected (firewalled/no services)
INFRASTRUCTURE CLASSIFICATION
- Network role: Microsoft Azure CloudCompute
- Infrastructure type: Cloud provider
- DNS hostname: azpdsgbfmbi3.stretchoid.com
- Control plane: Listed on 1 DNSBL of 8 total lists
- Route stability: Unstable (0 route changes in 30-day window)
THREAT HISTORY
Analysis of 23 historical observations reveals:
- Recent observation (2026-08-13) flagged by proxycheck-io with risk score of 66, labeled "Compromised Server" proxy type
- Overall threat persistence: 0 days
- No known campaign associations
- No correlated IP indicators
- No certificate matches
NETWORK CONTEXT
Subnet analysis (20.64.104.0/24) shows:
- 16 total IPs, 15 active siblings
- Abuse density: 0%
- Risk distribution: 13 low risk, 2 medium risk, 0 high risk
- Neighbor risk scores: predominantly 25 (low), with two instances at 40 (medium)
RELATIONSHIP MAPPING
- 14 relationships identified
- Multiple associations to MSFT network infrastructure
- Repeated DNS associations to azpdsgbfmbi3.stretchoid.com
SOC RECOMMENDATION
No immediate blocking or firewall rules recommended. The IP exhibits characteristics consistent with legitimate Microsoft Azure infrastructure. Monitor for any changes in threat indicators, particularly given the historical proxycheck-io flagging. Standard Microsoft Azure traffic patterns expected; no anomalous behavior detected in current observation window.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | azpdsgbfmbi3.stretchoid.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | azpdsgbfmbi3.stretchoid.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 35% | 2 | 3 |
| routing | 17% | 1 | 1 |
| services | 24% | 2 | 2 |
| ownership | 35% | 2 | 3 |
| reputation | 17% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 14 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-31 19:32:48 UTC |
| Last Seen | 2026-08-13 01:50:09 UTC |
| Profile Built | 2026-08-13 02:12:37 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.