# 20.65.193.83 — IP Intelligence Summary 20.65.193.83 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdssukn0ap.stretchoid.com. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/20.65.193.83 - Last updated: 2026-10-06 ## Ownership - Organization: Microsoft Corporation - Network name: MSFT - Allocated block: 20.33.0.0/16 - ASN: AS8075 (https://ipdebrief.com/asn/8075) - Regional registry: ARIN - Cloud / hosting provider: Microsoft Azure ## Location - City: San Antonio - Region: TX - Country: United States - Time zone: America/Chicago ## Network classification - Infrastructure type: CloudCompute - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Low Risk (25/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - azpdssukn0ap.stretchoid.com - Forward-confirmed: yes ## Analyst narrative \# IP Intelligence Briefing: 20.65.193.83/32 **Classification**: LOW RISK - Cloud Infrastructure **Date**: 2026-08-05 **Risk Score**: 25/100 **Status**: Not Recommended for Blocking \--- \## Executive Summary IP address 20.65.193.83 is identified as Microsoft Corporation Azure cloud infrastructure (ASN 8075). The IP exhibits low-risk characteristics with no active threat indicators. No immediate defensive action required; however, SOC teams should monitor the subnet for anomalous activity patterns. \--- \## Risk Profile **Overall Risk Score**: 25 (Low) **Provider Risk**: 0 (Microsoft) **Authority Score**: 0 **Stability**: Stable ownership **Classification**: Low Risk **Risk Breakdown**: \- No known attacker activity detected \- No Tor exit node activity \- No spam source classification \- Zero blacklist matches at time of analysis \- Not a known campaign participant \--- \## Technical Profile **Organization**: Microsoft Corporation (AS8075 - MSFT) **Network Block**: 20.33.0.0/16 **Infrastructure Type**: Microsoft Azure Cloud **Location**: San Antonio, TX, US (America/Chicago timezone) **Geolocation Confidence**: 0.56 (Multi-signal inference) **Geolocation Accuracy**: ±150 km radius **DNS Resolution**: \- Primary PTR: azpdssukn0ap.stretchoid.com \- Forward Resolution: Confirmed (stretchoid.com) \- DNSSEC: Valid \- CAA Records: Present \- DNSBL Listings: 1 of 8 total lists (low severity) **Network Services**: Firewalled / No Services Open **HTTP/TLS**: No services detected (consistent with cloud infrastructure) \--- \## Threat Intelligence Assessment **Threat Indicators**: None \- No malicious indicators in threat feeds \- No known campaign associations \- No abuse confidence score elevation \- Not a known attacker IP **Control Plane Analysis**: \- BGP Origin: 20.64.0.0/10 \- Route Stability: False \- RPKI State: Not assessed \- Operator Score: 0.3478 (Basic) \- Delegation Age: Not available \--- \## Neighborhood Analysis (/24: 20.65.193.0/24) **Subnet Classification**: Mostly Clean **Abuse Density**: 0.1667 (16.67% abuse density) **Total Siblings**: 30 **Active Siblings**: 26 **Threat Siblings**: 5 **Risk Distribution**: \- Low Risk: 21 IPs (score 25) \- Medium Risk: 4 IPs (score 40) \- High Risk: 0 IPs \- Null Risk: 5 IPs **Notable Neighbors**: \- 20.65.193.83: Risk 25 (target IP) \- 20.65.193.108: Risk 40 (Medium) \- 20.65.193.158: Risk 40 (Medium) \- 20.65.193.159: Risk 40 (Medium) \- 20.65.193.203: Risk 50 (High) The subnet demonstrates mixed risk characteristics typical of Microsoft Azure cloud deployments. The presence of high-risk siblings warrants monitoring but does not indicate malicious activity on the target IP. \--- \## Observation History **Total Observations**: 23 **Recent Activity**: 2026-08-05 **Threat Persistence**: 0 days (no persistent malicious behavior) **Ownership Changes**: 0 **Threat Observation Count**: 1 **Key Historical Signals**: \- 2026-08-05 13:18: Ownership signal (confidence 0.85) \- 2026-08-05 13:17: Subnet abuse density signal (confidence 0.75) \- 2026-08-05 13:15: Geolocation signal - San Antonio, TX (confidence 0.56) \- 2026-08-05 13:14: DNSBL listing signal (8 total lists, 1 listed) \- 2026-08-05 13:14: Operator score signal (0.3478) The IP shows normal cloud infrastructure behavior with no escalating threat patterns. \--- \## Relationship Graph **DNS Associations**: azpdssukn0ap.stretchoid.com (Microsoft DNS alias) **Network Associations**: MSFT (Microsoft) - Multiple relationships The IP maintains expected relationships with Microsoft infrastructure and DNS services. No suspicious external associations detected. \--- \## Recommended Actions **Immediate Action**: Monitor - No Blocking Recommended **Firewall Rules**: None recommended at this time **Monitoring Priorities**: 1. Track subnet-level activity for anomalies 2. Monitor for service openings (currently firewalled) 3. Watch for DNSBL listing additions 4. Correlate with Microsoft Azure threat intelligence feeds **Context for SOC Analysts**: \- This IP is Microsoft Azure cloud infrastructure with standard operational patterns \- The single DNSBL listing is low severity and common for cloud IPs \- The subnet's 16.67% abuse density is within normal ranges for Azure deployments \- No evidence of malicious activity or compromise **Action Threshold**: Consider blocking only if this IP exhibits: \- Service openings (ports) \- Unusual DNS patterns \- Correlated threat activity with known campaigns \- Anomalous traffic patterns from your network \--- **Prepared By**: IPDebrief Intelligence Platform **Data Sources**: Multiple signal sources, threat feeds, DNS databases **Confidence Level**: High (multiple corroborating signals) **Review Frequency**: Quarterly (cloud infrastructure) ## Nearby addresses - 20.65.193.0 (https://ipdebrief.com/20.65.193.0) - 20.65.193.19 (https://ipdebrief.com/20.65.193.19) - 20.65.193.28 (https://ipdebrief.com/20.65.193.28) - 20.65.193.35 (https://ipdebrief.com/20.65.193.35) - 20.65.193.55 (https://ipdebrief.com/20.65.193.55) - 20.65.193.67 (https://ipdebrief.com/20.65.193.67) - 20.65.193.76 (https://ipdebrief.com/20.65.193.76) - 20.65.193.79 (https://ipdebrief.com/20.65.193.79) - 20.65.193.90 (https://ipdebrief.com/20.65.193.90) - 20.65.193.94 (https://ipdebrief.com/20.65.193.94) - 20.65.193.104 (https://ipdebrief.com/20.65.193.104) - 20.65.193.105 (https://ipdebrief.com/20.65.193.105) --- Source: IPDebrief, "20.65.193.83 IP intelligence", https://ipdebrief.com/20.65.193.83, updated 2026-10-06. Assessments are probabilistic.