# IP Intelligence Briefing: 20.65.194.183/32
Classification: Low Risk Cloud Infrastructure
Date: 2026-08-12
Analysis ID: IP-2065-194-183
---
## Executive Summary
IP 20.65.194.183 is a Microsoft Azure cloud compute resource with a low-risk profile (risk score: 25/100). The IP belongs to Microsoft Corporation (AS8075) and is part of the 20.33.0.0/16 CIDR block. No active threat indicators were observed. The IP resolves to a Microsoft Azure hostname and exhibits normal cloud infrastructure behavior.
---
## Technical Profile
| Attribute | Value |
|---|---|
| **IP Address** | 20.65.194.183 |
| **Organization** | Microsoft Corporation |
| **ASN** | AS8075 |
| **Network** | MSFT, 20.65.194.0/24 |
| **Location** | San Antonio, TX, US |
| **Infrastructure** | Microsoft Azure (CloudCompute) |
| **Risk Score** | 25 (Low Risk) |
| **DNS Resolution** | azpdsst8p8xq.stretchoid.com |
| **Services** | Firewalled/No Services |
---
## Threat Assessment
Current Risk Level: LOW
The IP exhibits no active threat indicators:
- Blacklist Status: Clean (0 listings)
- Known Attacker: No
- Spam Source: No
- Tor Exit Node: No
- Known Campaigns: None
Control Plane Observations:
- BGP prefix: 20.64.0.0/10
- Route stability: Inconsistent
- DNSSEC: Valid
- RPKI State: Not evaluated
---
## Neighborhood Analysis
Subnet 20.65.194.0/24 shows minimal abuse activity:
- Abuse Density: 0.1481 (mostly clean)
- Total Siblings: 27
- Active Siblings: 24
- Threat Siblings: 4
Risk distribution within subnet: 23 low-risk IPs, 1 medium-risk IP, 0 high-risk IPs. This indicates normal Microsoft Azure cloud infrastructure with occasional flagged resources.
---
## Relationship Graph
The IP maintains associations with:
- DNS Hostnames: azpdsst8p8xq.stretchoid.com (Microsoft Azure DNS)
- Network: MSFT (Microsoft Corporation)
No suspicious entity relationships detected.
---
## Historical Observations
Analysis of 22 historical observations reveals:
- No persistent malicious behavior
- Occasional DNS blacklist detections (1 of 8 lists)
- Stable Microsoft Azure network presence
- No significant risk escalation
---
## Recommended Actions
Security Posture: Monitor as standard Microsoft Azure infrastructure
Firewall Recommendations: None required
SOC Guidance:
- No immediate blocking or filtering required
- Consider standard Microsoft Azure network segmentation policies
- Monitor for any changes in network behavior or risk indicators
---
Status: No action required. This IP represents legitimate Microsoft Azure cloud infrastructure with a low-risk profile.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | azpdsst8p8xq.stretchoid.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | azpdsst8p8xq.stretchoid.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 β Basic operator with some routing infrastructure |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 46% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 19% | 2 | 2 |
| ownership | 27% | 2 | 3 |
| reputation | 21% | 1 | 2 |
| geolocation | 35% | 2 | 3 |
| Overall | 27% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-07-23 01:41:18 UTC |
| Last Seen | 2026-08-12 17:24:00 UTC |
| Profile Built | 2026-08-12 17:41:00 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.