# 20.64.105.194 — IP Intelligence Summary

20.64.105.194 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdsgens699.stretchoid.com. As of September 5, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/20.64.105.194
- Last updated: 2026-09-05

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 20.33.0.0/16
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: San Antonio
- Region: TX
- Country: United States
- Time zone: America/Chicago

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Low Risk (25/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- azpdsgens699.stretchoid.com
- Forward-confirmed: yes

## Analyst narrative

**Intelligence Briefing: 20.64.105.194/32**

**Classification:** Microsoft Azure Infrastructure

**Risk Level:** Low (Score: 25)

**Date:** September 2026

**Executive Summary**

IP address 20.64.105.194 was identified as Microsoft Corporation infrastructure (ASN 8075) operating within the Microsoft Azure cloud environment. The address exhibits a low-risk profile with no active threat indicators, blacklist entries, or association with known malicious campaigns. While classified as a suspicious host due to neighborhood context, the IP itself did not generate specific malicious traffic patterns or service anomalies.

**Technical Profile**

The address resides in San Antonio, TX, and is associated with the 20.64.0.0/10 network block. DNS reverse resolution returned azpdsgens699.stretchoid.com, consistent with Azure DNS endpoints. No open ports, server banners, or HTTP services were detected, indicating a firewalled or backend infrastructure role. The control plane showed DNSSEC validation enabled, and no Route Origin Authorization (ROA) inconsistencies were present.

**Network Context and Neighborhood**

Analysis of the 20.64.105.0/24 subnet revealed a mixed classification with an abuse density of 0.2857. Twenty-seven active sibling IPs were observed, eight of which were flagged as threat siblings. The target IP showed no inherited risk from neighbors and remained unlisted on major threat feeds. Total observations reached 33 across multiple sources, with the most recent signal recorded on September 5, 2026.

**Recommendations**

No immediate blocking is required. Analysts should monitor the IP for context-specific anomalies, particularly if associated with suspicious source traffic. Given the cloud-native infrastructure and low-risk reputation, standard logging and traffic correlation are recommended over automatic mitigation.

## Nearby addresses

- 20.64.105.0 (https://ipdebrief.com/20.64.105.0)
- 20.64.105.6 (https://ipdebrief.com/20.64.105.6)
- 20.64.105.19 (https://ipdebrief.com/20.64.105.19)
- 20.64.105.20 (https://ipdebrief.com/20.64.105.20)
- 20.64.105.39 (https://ipdebrief.com/20.64.105.39)
- 20.64.105.41 (https://ipdebrief.com/20.64.105.41)
- 20.64.105.53 (https://ipdebrief.com/20.64.105.53)
- 20.64.105.54 (https://ipdebrief.com/20.64.105.54)
- 20.64.105.76 (https://ipdebrief.com/20.64.105.76)
- 20.64.105.88 (https://ipdebrief.com/20.64.105.88)
- 20.64.105.91 (https://ipdebrief.com/20.64.105.91)
- 20.64.105.124 (https://ipdebrief.com/20.64.105.124)

---

Source: IPDebrief, "20.64.105.194 IP intelligence", https://ipdebrief.com/20.64.105.194, updated 2026-09-05. Assessments are probabilistic.