20.65.194.42
20.65.194.42 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdssugh70r.stretchoid.com. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 20.65.194.42/32
Date: 2026-08-12
Classification: Low Risk Cloud Infrastructure
---
## Executive Summary
IP 20.65.194.42 is identified as Microsoft Azure cloud infrastructure with an overall Low Risk profile. The IP demonstrates cloud compute characteristics with no active services detected. While currently classified as low risk, the IP has been observed on 1 of 8 DNS blacklists with high severity severity in recent observations.
## Technical Profile
| Attribute | Value |
|---|---|
| **IP Address** | 20.65.194.42/32 |
| **Risk Score** | 25 (Low Risk) |
| **Organization** | Microsoft Corporation (ASN 8075) |
| **Network** | MSFT, 20.33.0.0/16 |
| **Geolocation** | San Antonio, TX, US |
| **Infrastructure** | Microsoft Azure Cloud Compute |
| **Status** | Firewalled / No Services |
## Threat Assessment
Current Threat Indicators
- DNS Blacklist Status: Listed on 1 of 8 threat feeds with high severity (observed 2026-08-12)
- Threat Feeds: No known campaign associations
- Known Attacker: False
- Spam Source: False
- Tor Exit Node: False
Historical Observations
Analysis of 23 historical observations indicates:
- Consistent cloud infrastructure classification (Microsoft Azure)
- Subnet abuse density: 0.16 (mostly clean)
- Inherited risk from subnet: 6/100
- No persistent malicious behavior detected
## Network Relationships
DNS Associations
- Hostname: azpdssugh70r.stretchoid.com
- Domain: stretchoid.com
- Note: No SPF or DMARC records configured for this domain
Subnet Context
The /24 subnet (20.65.194.0/24) contains 26 total neighbors:
- Risk Distribution: 0 high, 1 medium, 23 low
- Abuse Density: 0.16
- Notable Neighbor: 20.65.194.174 (Risk Score: 50)
- Common Authority Score: 60 across neighbors
## SOC Analyst Recommendations
Immediate Actions
1. Monitor DNSBL listings - IP appears on 1 of 8 blacklists; investigate source of listing
2. Verify legitimate Azure usage - Confirm expected Microsoft Azure traffic patterns
3. Review DNS configuration - azpdssugh70r.stretchoid.com lacks email authentication (SPF/DMARC)
Firewall/Network Rules
- No specific blocking recommended (low risk)
- Monitor for service anomalies (currently no open ports detected)
- Block only if DNSBL listing source is confirmed malicious
Long-term Considerations
- Subnet-level monitoring recommended due to 4 threat siblings in /24
- Investigate 20.65.194.174 (risk score 50) for potential correlation
- Track stretchoid.com domain reputation independently
---
Assessment: This IP represents legitimate Microsoft Azure infrastructure with elevated risk due to a single DNS blacklist listing. No immediate blocking recommended, but maintain monitoring on the blacklist status and correlate with subnet-level threats.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | azpdssugh70r.stretchoid.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | azpdssugh70r.stretchoid.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 20.64.0.0/10 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 30% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 23% | 2 | 3 |
| ownership | 17% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 20% | 2 | 3 |
| Overall | 21% | 10 | 17 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-20 00:17:18 UTC |
| Last Seen | 2026-10-06 06:08:54 UTC |
| Profile Built | 2026-10-06 06:10:03 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 25 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 20.65.194.42
Who owns the IP address 20.65.194.42?
20.65.194.42 is registered to Microsoft Corporation. The address falls within the 20.33.0.0/16 network block. Registration is held at ARIN.
Where is 20.65.194.42 located?
Geolocation data places 20.65.194.42 in San Antonio, TX, United States. The local time zone is America/Chicago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 20.65.194.42 malicious or safe?
20.65.194.42 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 20.65.194.42?
The reverse DNS (PTR) record for 20.65.194.42 is azpdssugh70r.stretchoid.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 20.65.194.42 a VPN, proxy, or data center address?
20.65.194.42 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.