# 20.65.195.124 — IP Intelligence Summary 20.65.195.124 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdsslt2dou.stretchoid.com. As of September 2, 2026, IPDebrief rates it Moderate Risk (40/100); no anonymizing service was detected. - Canonical page: https://ipdebrief.com/20.65.195.124 - Last updated: 2026-09-02 ## Ownership - Organization: Microsoft Corporation - Network name: MSFT - Allocated block: 20.33.0.0/16 - ASN: AS8075 (https://ipdebrief.com/asn/8075) - Regional registry: ARIN - Cloud / hosting provider: Microsoft Azure ## Location - City: San Antonio - Region: TX - Country: United States - Time zone: America/Chicago ## Network classification - Infrastructure type: — - Datacenter / hosting: yes - Residential: no - Mobile: no - Anycast: no - Tor exit node: no - VPN: no - Proxy: no ## Risk assessment - Assessment: Moderate Risk (40/100) - Blocklist listings: 0 - Suspicious activity indicators: no - Spam source: no ## Reverse DNS - azpdsslt2dou.stretchoid.com - Forward-confirmed: yes ## Analyst narrative \# IP INTELLIGENCE BRIEFING **Target:** 20.65.195.124/32 **Classification:** Microsoft Azure Cloud Infrastructure **Risk Assessment:** LOW (Score: 25) **Date:** July 27, 2026 \--- \## EXECUTIVE SUMMARY IP 20.65.195.124 is a Microsoft Azure cloud computing endpoint located in San Antonio, Texas. The IP presents minimal threat indicators with a risk score of 25. No malicious activity has been observed, and the IP operates within a clean subnet environment. The address is assigned to Microsoft Corporation (ASN 8075) and serves cloud infrastructure purposes with firewalled/no services detected. \--- \## OWNERSHIP & INFRASTRUCTURE | Attribute | Value | |-----------|-------| | **Organization** | Microsoft Corporation | | **ASN** | 8075 (MSFT) | | **CIDR Block** | 20.33.0.0/16 | | **Geolocation** | San Antonio, TX, US | | **Infrastructure Type** | Cloud Compute (Microsoft Azure) | | **Cloud Provider** | Microsoft Azure | | **Hosting Status** | Yes | The IP is part of Microsoft's Azure cloud infrastructure block and is properly registered under RIR ARIN. \--- \## NETWORK PROFILE | Attribute | Value | |-----------|-------| | **Reputation** | Low Risk | | **Risk Score** | 25 | | **Provider Score** | 0 | | **Authority Score** | 0 | | **Open Ports** | None (Firewalled) | | **DNS PTR** | azpdsslt2dou.stretchoid.com | | **Forward Resolution** | Confirmed | | **Blacklist Status** | 0 lists | No open services or ports were detected. The IP is configured with a firewall, which is consistent with cloud infrastructure security practices. \--- \## THREAT INTELLIGENCE | Indicator | Status | |-----------|--------| | **Known Attacker** | No | | **Tor Exit Node** | No | | **Spam Source** | No | | **Abuse Confidence** | Not Applicable | | **Campaign Association** | None detected | | **Threat Feeds** | Empty | No threat indicators were identified across major threat intelligence feeds. The IP has not been associated with any known malicious campaigns. \--- \## SUBNET ANALYSIS (20.65.195.0/24) | Metric | Value | |--------|-------| | **Total Siblings** | 20 | | **Active Siblings** | 11 | | **Threat Siblings** | 2 | | **Abuse Density** | 0.1 | | **Classification** | Mostly Clean | | **High-Risk Neighbors** | 0 | | **Medium-Risk Neighbors** | 4 | | **Low-Risk Neighbors** | 15 | The /24 subnet demonstrates low abuse density with the majority of neighbors operating as low-risk entities. The target IP (20.65.195.124) has an inherited risk score of 4, indicating minimal subnet-level contamination. \--- \## OBSERVATION HISTORY A total of 21 signal observations were recorded. Key temporal findings include: \- **Most Recent:** 2026-07-27 04:02:23 UTC \- **Abuse Density Trend:** Stable at 0.1 \- **Subnet Classification:** "mostly_clean" \- **Threat Persistence:** 0 days \- **Ownership Changes:** 0 The IP shows stable characteristics with no escalation in threat posture over the observation period. No new threat indicators emerged during monitoring. \--- \## RELATIONSHIP ANALYSIS Nine relationships were identified: \- **Network Associations:** Multiple MSFT (Microsoft) network links \- **DNS Associations:** azpdsslt2dou.stretchoid.com (repeated associations) The relationship graph indicates standard cloud infrastructure patterns with no anomalous connections to external malicious entities. \--- \## CONTROL PLANE & ROUTING | Metric | Value | |--------|-------| | **Origin ASN** | 8075 | | **BGP Prefix** | 20.64.0.0/10 | | **Route Changes (30d)** | 0 | | **Route Stability** | Stable | | **DNSSEC Valid** | Yes | | **CAA Records** | Present | | **DNSBL Lists** | 1 of 8 | The IP demonstrates stable routing behavior with no recent route changes. DNSSEC validation is enabled, indicating proper infrastructure security configuration. \--- \## RECOMMENDED ACTIONS **No immediate security actions required.** The IP presents a low-risk profile consistent with legitimate Microsoft Azure cloud infrastructure. Standard cloud provider IP ranges should be evaluated on a case-by-case basis for specific threat indicators rather than blanket blocking. \### Firewall Considerations: \- No blocking recommended \- Monitor for behavioral anomalies \- Treat as trusted infrastructure by default \--- \## ANALYST NOTES This IP address represents normal Microsoft Azure cloud infrastructure activity. The low risk score, absence of open services, and clean subnet environment indicate legitimate operational use. SOC teams should continue monitoring for changes in behavior or association with suspicious entities, but no immediate defensive measures are warranted. ## Nearby addresses - 20.65.195.19 (https://ipdebrief.com/20.65.195.19) - 20.65.195.23 (https://ipdebrief.com/20.65.195.23) - 20.65.195.28 (https://ipdebrief.com/20.65.195.28) - 20.65.195.30 (https://ipdebrief.com/20.65.195.30) - 20.65.195.32 (https://ipdebrief.com/20.65.195.32) - 20.65.195.33 (https://ipdebrief.com/20.65.195.33) - 20.65.195.35 (https://ipdebrief.com/20.65.195.35) - 20.65.195.41 (https://ipdebrief.com/20.65.195.41) - 20.65.195.44 (https://ipdebrief.com/20.65.195.44) - 20.65.195.47 (https://ipdebrief.com/20.65.195.47) - 20.65.195.49 (https://ipdebrief.com/20.65.195.49) - 20.65.195.53 (https://ipdebrief.com/20.65.195.53) --- Source: IPDebrief, "20.65.195.124 IP intelligence", https://ipdebrief.com/20.65.195.124, updated 2026-09-02. Assessments are probabilistic.