20.64.106.39📋 Copy

## IP Intelligence Briefing: 20.64.106.39

Classification: Low Risk – Microsoft Azure Infrastructure

Report Generated: June 15, 2026

Executive Summary

IP address 20.64.106.39/32 is registered to Microsoft Corporation (ASN 8075) and operates as Microsoft Azure cloud infrastructure located in San Antonio, TX. Risk assessment indicates Low Risk with an overall risk score of 25/100. No active threat indicators detected.

Infrastructure Profile

• Organization: Microsoft Corporation
• ASN: 8075
• Network Role: Cloud Compute (Microsoft Azure)
• Geolocation: United States, TX, San Antonio (29.43, -98.49)
• BGP Prefix: 20.64.0.0/10
• Control Plane: Route stability flag set; operator score 0.3478 (Basic)

Threat Indicators

• Reputation: Low Risk
• Known Attacker: No
• Tor Exit Node: No
• Spam Source: No
• Blacklist Status: Listed on 1 of 8 DNSBLs checked
• Active Services: None detected (no open ports, no TLS certificates)
• Campaign Affiliation: None identified

DNS Analysis

• PTR Records: azpdsghq7jpi.stretchoid.com
• Forward Resolution: Confirmed (1 hostname)
• Note: DNS hostname resolves to stretchoid.com domain, which may warrant correlation with stretchoid.com infrastructure

Historical Observations

Analysis of 21 observations reveals stable behavior with no significant risk escalation:

• No ownership changes detected
• No persistent malicious activity
• Threat observation count: 1 (isolated event)
• Control plane signals remain consistent across observation window

Subnet Neighborhood Assessment

Subnet 20.64.106.0/24 shows minimal abuse activity:

• Abuse Density: 0 (clean)
• Neighbor Risk Distribution: 0 High, 1 Medium, 1 Low
• Siblings:

- 20.64.106.116 (Risk Score: 25)

- 20.64.106.155 (Risk Score: 40)

Related Entities

37 relationships identified, primarily:

• DNS associations to azpdsghq7jpi.stretchoid.com
• Network association to MSFT infrastructure
• No malicious entity correlations detected

SOC Recommendations

1. Allow: No blocking recommended based on current risk profile

2. Monitor: DNS hostname azpdsghq7jpi.stretchoid.com warrants correlation with stretchoid.com known infrastructure

3. Validate: Confirm 20.64.106.39/32 is legitimate Microsoft Azure endpoint if traffic is observed

4. Firewall Rules: No restrictive rules required at this time

Conclusion: This IP represents standard Microsoft Azure cloud infrastructure with low-risk characteristics. The DNS association to stretchoid.com is the only element requiring attention for correlation purposes.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.