20.65.195.30
20.65.195.30 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to San Antonio, United States. It belongs to datacenter or hosting infrastructure with reverse DNS name azpdss6q8fg5.stretchoid.com. As of October 6, 2026, IPDebrief rates it Low Risk (25/100); no anonymizing service was detected.
# IP Intelligence Briefing: 20.65.195.30/32
Date: [Current Date]
Classification: Low Risk Cloud Infrastructure
---
## Executive Summary
IP 20.65.195.30 is a Microsoft Azure cloud compute endpoint operating from San Antonio, TX, with a risk score of 25 (Low Risk). The address resolves to a Microsoft-owned subnet and demonstrates typical cloud infrastructure behavior with no active threat indicators.
## Profile Overview
| Attribute | Value |
|---|---|
| **Risk Score** | 25 (Low Risk) |
| **Organization** | Microsoft Corporation (ASN 8075) |
| **Network** | 20.33.0.0/16 |
| **Geolocation** | San Antonio, TX, US |
| **Infrastructure Type** | CloudCompute (Microsoft Azure) |
| **Reputation** | Low Risk |
| **Threat Indicators** | None detected |
## Key Findings
Infrastructure Classification: The IP operates within Microsoft Azure's cloud infrastructure, classified as a cloud compute endpoint. The address resolves to a Microsoft network with strong network-level associations. DNS resolution points to azpdss6q8fg5.stretchoid.com, consistent with Azure service naming conventions.
Threat Assessment: No threat indicators were observed. The IP is not flagged as a Tor exit node, known attacker, or spam source. Blacklist count stands at zero with no active threat feed correlations.
Neighborhood Analysis: The /24 subnet (20.65.195.0/24) contains 21 active sibling IPs with mixed classification. Risk distribution shows 0 high-risk, 3 medium-risk, and 17 low-risk neighbors. Abuse density is 0.3636, indicating moderate but acceptable neighborhood risk levels typical of Microsoft Azure deployments.
## Historical Context
Twenty-three observations tracked over recent periods show consistent cloud infrastructure behavior. Geolocation signals alternate between San Antonio and Boston, TX, consistent with Microsoft's multi-region Azure deployments. No significant risk escalation detected.
## Operational Notes
- No open ports or services detected (firewalled/no services exposed)
- Single DNSBL listing among eight total lists
- DNSSEC valid with CAA records present
- Control plane shows route stability concerns with route changes observed in the last 30 days
## Recommended Actions
No specific firewall rules or blocking recommendations generated. The IP demonstrates standard cloud infrastructure behavior with a low risk profile. Standard cloud security monitoring practices are appropriate for this asset.
---
Assessment: This IP represents legitimate Microsoft Azure cloud infrastructure with no active malicious indicators. Monitoring should continue with standard cloud security baselines.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR | azpdss6q8fg5.stretchoid.com |
| Forward Confirmed | Yes — FCrDNS verified |
| Forward Hostnames | azpdss6q8fg5.stretchoid.com |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Verified |
| DNSSEC | Not signed |
| CAA | Present |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Firewalled / No Services |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| No open ports detected | |||
| Closed Ports | 22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned) | ||
| Server | — |
| HTTP Title | — |
🔐 TLS Certificate
| SANs | None |
| Valid From | — |
| Valid Until | — |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 20.64.0.0/10 |
| Route mapping | Found |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 42% | 2 | 3 |
| routing | 8% | 1 | 1 |
| services | 15% | 2 | 2 |
| ownership | 17% | 2 | 3 |
| reputation | 28% | 1 | 3 |
| geolocation | 27% | 2 | 3 |
| Overall | 23% | 10 | 15 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (70%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-04 17:24:12 UTC |
| Last Seen | 2026-10-06 23:50:05 UTC |
| Profile Built | 2026-10-06 23:51:09 UTC |
| Data Freshness | Live |
| Signal Types | 24 |
| Total Observations | 26 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 20.65.195.30
Who owns the IP address 20.65.195.30?
20.65.195.30 is registered to Microsoft Corporation. The address falls within the 20.33.0.0/16 network block. Registration is held at ARIN.
Where is 20.65.195.30 located?
Geolocation data places 20.65.195.30 in San Antonio, TX, United States. The local time zone is America/Chicago. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 20.65.195.30 malicious or safe?
20.65.195.30 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What is the hostname for 20.65.195.30?
The reverse DNS (PTR) record for 20.65.195.30 is azpdss6q8fg5.stretchoid.com. This hostname is forward-confirmed, meaning it resolves back to the same address.
Is 20.65.195.30 a VPN, proxy, or data center address?
20.65.195.30 is classified as cloud infrastructure based on network ownership and behavioural analysis.