INTELLIGENCE BRIEFING: 20.65.194.119/32
Classification: Low Risk β Legitimate Cloud Infrastructure
Report Date: 2026-08-13
Analyst: IPDebrief Intelligence Team
---
**Executive Summary**
IP address 20.65.194.119 is a Microsoft Azure cloud infrastructure endpoint with a low risk score (25/100). No malicious indicators or threat activity detected. The IP belongs to Microsoft Corporation's cloud compute infrastructure and presents no actionable threat to defensive operations.
---
**Infrastructure Profile**
| Attribute | Value |
|---|---|
| **Organization** | Microsoft Corporation (ASN 8075) |
| **Network** | MSFT, 20.33.0.0/16 |
| **Location** | San Antonio, TX, US |
| **Infrastructure Type** | CloudCompute (Azure) |
| **Risk Score** | 25/100 (Low Risk) |
**Network Role Classification**
- Provider: Microsoft Azure
- Connection Type: Cloud infrastructure
- Services: None exposed (Firewalled / No Services)
- Proxy/VPN/Tor: Not detected
---
**Threat Intelligence Assessment**
Current Status: Clean
- Abuse Confidence: N/A
- Blacklist Count: 0
- Known Campaigns: None
- Threat Feeds: No matches
- Tor Exit Node: No
- Known Attacker: No
- Spam Source: No
Control Plane Data:
- Route stability: False
- DNSBL Listed: 1/8 lists
- Operator Score: 0.3478 (Basic)
- RPKI/IRR: No violations detected
---
**DNS Analysis**
| Field | Value |
|---|---|
| PTR Hostname | azpdssou4l3n.stretchoid.com |
| Forward Resolution | Confirmed |
| SPF Record | Not configured |
| DMARC Record | Not configured |
*Note: DNS configuration reflects typical cloud infrastructure patterns. stretchoid.com is a legitimate Azure-hosted service.*
---
**Historical Observations**
- Total Observations: 17
- Threat Persistence Days: 0
- Ownership Changes: 0
- Classification History: Consistently classified as "mostly_clean"
- Geolocation Stability: Consistent San Antonio, TX assignment
---
**Subnet Neighborhood Analysis**
- Subnet: 20.65.194.0/24
- Total Neighbors: 26
- Abuse Density: 0.0 (Clean)
- Risk Distribution: 0 High, 2 Medium, 24 Low
Neighboring IP Risk Scores: 92% (24/26) with risk score 25, 2 IPs with risk score 40-50. Authority scores across subnet average 60, consistent with legitimate cloud infrastructure patterns.
---
**Recommended Actions**
No defensive actions required. The IP presents no threat indicators and operates as legitimate Microsoft Azure infrastructure. Standard monitoring procedures apply.
Firewall Rules: None required
---
**Conclusion**
IP 20.65.194.119 is a standard Microsoft Azure cloud endpoint with no malicious activity. The subnet exhibits clean abuse patterns, and the IP shows no signs of compromise or abuse. Continue monitoring with standard baseline procedures.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | azpdssou4l3n.stretchoid.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | azpdssou4l3n.stretchoid.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 25% | 1 | 1 |
| routing | 25% | 1 | 1 |
| services | 25% | 1 | 1 |
| ownership | 0% | 0 | 0 |
| reputation | 0% | 0 | 0 |
| geolocation | 0% | 0 | 0 |
| Overall | 12% | 3 | 3 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-08-07 19:25:30 UTC |
| Last Seen | 2026-08-30 13:39:47 UTC |
| Profile Built | 2026-08-30 13:41:54 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 26 |
Full dossier details are available via our API.