# IP Intelligence Briefing: 20.65.194.61/32
## Executive Summary
IP address 20.65.194.61 belongs to Microsoft Corporation (ASN 8075) and operates as Microsoft Azure cloud infrastructure. The IP presents a low risk profile (risk score: 25) with no active threat indicators. The address resolves to stretchoid.com infrastructure and is located in San Antonio, TX, US.
## Ownership and Classification
- Organization: Microsoft Corporation (MSFT)
- ASN: 8075
- Infrastructure Type: CloudCompute (Microsoft Azure)
- Network Role: Hosting infrastructure
- BGP Prefix: 20.64.0.0/10
- Registration: ARIN
## Geolocation
- Country: United States (US)
- Region/State: Texas (TX)
- City: San Antonio
- Coordinates: 29.43°N, -98.49°W
- Timezone: America/Chicago
- GeoConsensus: Validated across 1 source
## Network Signals and Services
- Reverse DNS: azpdsss5fjwq.stretchoid.com (forward confirmed)
- Open Ports: None detected
- TLS Certificates: None
- HTTP Services: None detected
- DNSSEC: Valid
- DNSBL Status: Listed on 1 of 8 threat lists
## Threat Indicators
- Risk Score: 25 (Low Risk)
- Abuse Confidence: Not applicable
- Blacklist Count: 0
- Tor Exit: False
- Known Attacker: False
- Spam Source: False
- Known Campaigns: None
## Neighborhood Analysis (Subnet: 20.65.194.0/24)
- Abuse Density: 42.86%
- Classification: Mixed
- Total Siblings: 8
- Active Siblings: 5
- Threat Siblings: 3
- Risk Distribution: 4 medium-risk, 4 low-risk, 0 high-risk
Notable Neighbors:
| IP Address | Risk Score | Authority Score |
|---|---|---|
| 20.65.194.28 | 40 | 60 |
| 20.65.194.59 | 25 | 60 |
| 20.65.194.102 | 0 | 50 |
| 20.65.194.111 | 40 | 60 |
| 20.65.194.129 | 25 | 60 |
| 20.65.194.164 | 40 | 60 |
| 20.65.194.168 | 40 | 60 |
| 20.65.194.174 | 0 | 50 |
## Historical Observations (25 signals recorded)
Recent observations indicate:
- June 14, 2026: Network classification signals confirmed Microsoft Azure CloudCompute infrastructure
- June 14, 2026: Geolocation signals consistently resolving to San Antonio, TX, US
- June 14, 2026: Neighborhood signals showing mixed classification with 42.86% abuse density
- June 19, 2026: DNS listing activity detected with high severity classifications
## Relationships
- Network Association: Microsoft (MSFT)
- DNS Associations: stretchoid.com hostnames
## Recommended Actions
No specific firewall rules or blocking actions are recommended. The IP is Microsoft Azure cloud infrastructure with no active threat indicators. Standard monitoring protocols apply.
Analysis Date: Based on available signal data
Classification: Low Risk - Legitimate Cloud Infrastructure
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
π’ Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | β |
| CIDR Block | β |
| RIR | ARIN |
| Country | β |
| Abuse Contact | Available via RDAP |
π DNS Intelligence
| PTR | azpdsss5fjwq.stretchoid.com |
| Forward Confirmed | Yes β FCrDNS verified |
| Forward Hostnames | azpdsss5fjwq.stretchoid.com |
π DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
βοΈ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting β Infrastructure provider without advanced routing |
π Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | β |
| HTTP Title | β |
π TLS Certificate
| SANs | None |
| Valid From | β |
| Valid Until | β |
π― Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 26% | 2 | 4 |
| routing | 8% | 1 | 1 |
| services | 12% | 2 | 2 |
| ownership | 24% | 2 | 3 |
| reputation | 26% | 1 | 3 |
| geolocation | 30% | 2 | 3 |
| Overall | 21% | 10 | 16 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
π Observation Timeline π Live
| First Seen | 2026-05-08 11:10:19 UTC |
| Last Seen | 2026-06-27 13:10:07 UTC |
| Profile Built | 2026-06-28 07:16:46 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 29 |
Full dossier details are available via our API.