20.65.185.21
IP INTELLIGENCE BRIEFING
Subject: 20.65.185.21/32
Classification: Microsoft Azure Cloud Infrastructure
Risk Assessment: Low Risk (Score: 25/100)
---
OWNERSHIP & GEOLOCATION
The IP belongs to Microsoft Corporation (ASN 8075, MSFT) within the 20.33.0.0/16 CIDR block. Geolocation consensus identifies San Antonio, Texas, US. The IP is classified as Microsoft Azure cloud compute infrastructure with firewalled/no-service posture.
NETWORK ROLE
- Infrastructure Type: CloudCompute (Azure)
- Connection Type: Cloud-hosted service
- Service Status: No open ports detected (firewalled)
- Hosting Classification: Cloud infrastructure provider
THREAT INDICATORS
- Blacklist Count: 0
- Known Campaign Associations: None
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
- Abuse Confidence Score: Not applicable (legitimate provider IP)
DNS RESOLUTION
- PTR Hostname: azpdssuq85vj.stretchoid.com
- Forward Resolution: Confirmed (stretchoid.com)
- DNSSEC: Valid
- CAA Records: Present
CONTROL PLANE DATA
- BGP Prefix: 20.64.0.0/10
- Operator Score: 0.3478 (Basic)
- DNSBL Listed: 1 of 8 total lists
- Route Stability: Unstable
- RPKI State: Not evaluated
NEIGHBORHOOD ANALYSIS
- Subnet: 20.65.185.0/24
- Abuse Density: 0% (Clean)
- Threat Siblings: 0
- Active Siblings: 0
- Total Siblings: 1
OBSERVATION HISTORY
22 historical observations recorded. Recent activity (August 2026) shows geolocation signals from Boston, US (BOS), consistent with Microsoft Azure routing patterns. Routing traces indicate 29-hop paths through Comcast transit networks. No persistent malicious signals detected.
RELATIONSHIP MAPPING
Primary relationships consist of DNS associations to stretchoid.com hostnames (Azure DNS pattern) and network-level associations to MSFT infrastructure. No anomalous relationships identified.
RECOMMENDED ACTIONS
No firewall rules or blocking recommendations. Risk score of 25 indicates this is a legitimate Microsoft Azure cloud infrastructure IP. Standard allow policies appropriate. Monitor for any changes in DNS resolution or network behavior.
---
INTEL SUMMARY
20.65.185.21 is a legitimate Microsoft Azure cloud compute IP with low risk profile. Clean neighborhood classification and absence of threat indicators support continued monitoring without blocking. No actionable threat indicators present.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | azpdssuq85vj.stretchoid.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | azpdssuq85vj.stretchoid.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 38% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 30% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 26% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-29 04:30:21 UTC |
| Last Seen | 2026-08-12 23:05:18 UTC |
| Profile Built | 2026-08-12 23:11:48 UTC |
| Data Freshness | Live |
| Signal Types | 22 |
| Total Observations | 23 |
Full dossier details are available via our API.