# 20.65.195.105 — IP Intelligence Summary

20.65.195.105 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdss0agogi.stretchoid.com. As of September 3, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/20.65.195.105
- Last updated: 2026-09-03

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 20.33.0.0/16
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: San Antonio
- Region: TX
- Country: United States
- Time zone: America/Chicago

## Network classification

- Infrastructure type: —
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (40/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Reverse DNS

- azpdss0agogi.stretchoid.com
- Forward-confirmed: yes

## Analyst narrative

\## IP Intelligence Briefing: 20.65.195.105

**Classification:** Microsoft Azure Infrastructure IP

**Risk Level:** Low Risk (Score: 25)

\### Ownership & Infrastructure

The IP belongs to Microsoft Corporation (ASN 8075) within the MSFT CIDR block 20.33.0.0/16. The IP is classified as Microsoft Azure cloud infrastructure with no exposed services or open ports. The geolocation reports San Antonio, Texas, US with an accuracy radius of 200km. DNS resolution points to azpdss0agogi.stretchoid.com, indicating Azure infrastructure hostnames.

\### Threat Assessment

The IP carries a risk score of 25 (Low Risk) but shows concerning indicators:

\- Listed on 1 out of 8 DNSBLs with high severity rating

\- Recent history indicates "has_threats: true" signals from AlienVault OTX

\- Operator score rated as "Basic" (0.3478)

\- ICMP validation blocked, preventing full geographic verification

\- Control plane shows BGP prefix 20.64.0.0/10 with route instability flags

\### Subnet Neighborhood Analysis

The /24 subnet (20.65.195.0/24) contains 22 sibling IPs with the following distribution:

\- **Risk Scores:** 0 high-risk, 2 medium-risk, 18 low-risk

\- **Abuse Density:** 0.3636 (mixed classification)

\- **Threat Siblings:** 8 IPs showing threat indicators

\- Most neighbors maintain consistent riskScore:25 with authorityScore:60

Notable higher-risk neighbors in the subnet include 20.65.195.97 and 20.65.195.112 (riskScore:40).

\### Temporal Analysis

\- **Observation Count:** 26 historical signals

\- **Threat Persistence:** 0 days (not persistently malicious)

\- **Ownership Stability:** No ownership changes recorded

\- **Recent Activity:** Signals observed as recent as 2026-08-12T06:45:27Z

\### Intelligence Narrative

This IP represents legitimate Microsoft Azure cloud infrastructure with a low individual risk profile. However, the subnet exhibits mixed abuse characteristics with 36% abuse density and multiple threat-sibling IPs. The single DNSBL listing with high severity rating warrants monitoring. The absence of open ports and services suggests proper firewall configuration typical of Azure infrastructure. The threat signals appearing in history suggest transient activity that may correlate with the subnet's broader security posture.

**Recommended Actions:** Monitor for activity patterns, especially given the subnet's abuse density. No immediate blocking required, but maintain awareness of correlated IPs within the 20.65.195.0/24 range.

**Status:** Continue monitoring; no immediate threat action required.

## Nearby addresses

- 20.65.195.19 (https://ipdebrief.com/20.65.195.19)
- 20.65.195.23 (https://ipdebrief.com/20.65.195.23)
- 20.65.195.28 (https://ipdebrief.com/20.65.195.28)
- 20.65.195.30 (https://ipdebrief.com/20.65.195.30)
- 20.65.195.32 (https://ipdebrief.com/20.65.195.32)
- 20.65.195.33 (https://ipdebrief.com/20.65.195.33)
- 20.65.195.35 (https://ipdebrief.com/20.65.195.35)
- 20.65.195.41 (https://ipdebrief.com/20.65.195.41)
- 20.65.195.44 (https://ipdebrief.com/20.65.195.44)
- 20.65.195.47 (https://ipdebrief.com/20.65.195.47)
- 20.65.195.49 (https://ipdebrief.com/20.65.195.49)
- 20.65.195.53 (https://ipdebrief.com/20.65.195.53)

---

Source: IPDebrief, "20.65.195.105 IP intelligence", https://ipdebrief.com/20.65.195.105, updated 2026-09-03. Assessments are probabilistic.