20.65.195.105
20.65.195.105 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdss0agogi.stretchoid.com. As of September 3, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.
## IP Intelligence Briefing: 20.65.195.105
Classification: Microsoft Azure Infrastructure IP
Risk Level: Low Risk (Score: 25)
Ownership & Infrastructure
The IP belongs to Microsoft Corporation (ASN 8075) within the MSFT CIDR block 20.33.0.0/16. The IP is classified as Microsoft Azure cloud infrastructure with no exposed services or open ports. The geolocation reports San Antonio, Texas, US with an accuracy radius of 200km. DNS resolution points to azpdss0agogi.stretchoid.com, indicating Azure infrastructure hostnames.
Threat Assessment
The IP carries a risk score of 25 (Low Risk) but shows concerning indicators:
- Listed on 1 out of 8 DNSBLs with high severity rating
- Recent history indicates "has_threats: true" signals from AlienVault OTX
- Operator score rated as "Basic" (0.3478)
- ICMP validation blocked, preventing full geographic verification
- Control plane shows BGP prefix 20.64.0.0/10 with route instability flags
Subnet Neighborhood Analysis
The /24 subnet (20.65.195.0/24) contains 22 sibling IPs with the following distribution:
- Risk Scores: 0 high-risk, 2 medium-risk, 18 low-risk
- Abuse Density: 0.3636 (mixed classification)
- Threat Siblings: 8 IPs showing threat indicators
- Most neighbors maintain consistent riskScore:25 with authorityScore:60
Notable higher-risk neighbors in the subnet include 20.65.195.97 and 20.65.195.112 (riskScore:40).
Temporal Analysis
- Observation Count: 26 historical signals
- Threat Persistence: 0 days (not persistently malicious)
- Ownership Stability: No ownership changes recorded
- Recent Activity: Signals observed as recent as 2026-08-12T06:45:27Z
Intelligence Narrative
This IP represents legitimate Microsoft Azure cloud infrastructure with a low individual risk profile. However, the subnet exhibits mixed abuse characteristics with 36% abuse density and multiple threat-sibling IPs. The single DNSBL listing with high severity rating warrants monitoring. The absence of open ports and services suggests proper firewall configuration typical of Azure infrastructure. The threat signals appearing in history suggest transient activity that may correlate with the subnet's broader security posture.
Recommended Actions: Monitor for activity patterns, especially given the subnet's abuse density. No immediate blocking required, but maintain awareness of correlated IPs within the 20.65.195.0/24 range.
Status: Continue monitoring; no immediate threat action required.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | azpdss0agogi.stretchoid.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | azpdss0agogi.stretchoid.com |
🔐 DNS Hygiene
| Hygiene Score | 60% (Good) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Valid |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Tier 3 — Basic operator with some routing infrastructure |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 20.64.0.0/10 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 34% | 2 | 5 |
| routing | 8% | 1 | 1 |
| services | 23% | 2 | 3 |
| ownership | 20% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 30% | 2 | 4 |
| Overall | 23% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-12 08:51:37 UTC |
| Last Seen | 2026-09-03 02:43:44 UTC |
| Profile Built | 2026-09-03 02:52:59 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 33 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 20.65.195.105
Who owns the IP address 20.65.195.105?
20.65.195.105 is registered to Microsoft Corporation. The address falls within the 20.33.0.0/16 network block. Registration is held at ARIN.
Where is 20.65.195.105 located?
Geolocation data places 20.65.195.105 in San Antonio, TX, United States. The local time zone is America/Chicago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 20.65.195.105 malicious or safe?
20.65.195.105 currently carries a moderate risk assessment, meaning some indicators warrant caution, but the evidence is mixed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 20.65.195.105?
The reverse DNS (PTR) record for 20.65.195.105 is azpdss0agogi.stretchoid.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 20.65.195.105 a VPN, proxy, or data center address?
20.65.195.105 is classified as cloud infrastructure based on network ownership and behavioural analysis.