20.107.176.118
20.107.176.118 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Dublin, Ireland. It belongs to datacenter or hosting infrastructure. As of October 5, 2026, IPDebrief rates it High Risk (70/100); no anonymizing service was detected.
## INTELLIGENCE BRIEFING: 20.107.176.118
Classification: LOW RISK / LEGITIMATE INFRASTRUCTURE
Ownership & Infrastructure:
The target IP resolves to Microsoft Corporation (ASN 8075), network MSFT, within the 20.33.0.0/16 CIDR block. Geolocation data indicates Dublin, Ireland (IE) with a 150km accuracy radius. The infrastructure is classified as Microsoft Azure cloud compute hosting with no proxy, VPN, or residential characteristics.
Network Services:
Active services include HTTP (port 80), HTTPS (port 443), and SSH (port 22). The TLS certificate is issued by Let's Encrypt for the subject "storeops-media.checkpoint-service.com" with issuer CN=YE2, O=Let's Encrypt, C=US. Server fingerprint identifies Apache/2.4.58 running on Ubuntu. The IP responds with HTTP 302 status code.
Threat Assessment:
Risk score: 0 (Low Risk). No blacklist entries, no known attacker indicators, no spam source designation, and no Tor exit node association. Abuse confidence score is null. No threat campaigns or correlated IP activity detected. The control plane shows minimal operator risk (0.1304) with DNSSEC validation enabled.
Historical Analysis:
Observation history contains 23 signals with the most recent activity on 2026-08-05. Historical data confirms consistent Microsoft Azure cloud classification with no escalation in threat posture. Geo validation remains plausible across all observations. No persistent malicious behavior detected.
Neighborhood Context:
The /24 subnet (20.107.176.118/24) shows zero abuse density and is classified as clean. No sibling IPs exhibit threat characteristics. The neighborhood risk distribution indicates no high, medium, or low-risk neighbors.
Recommended Actions:
No firewall rules or blocking actions recommended. The IP presents no security concerns and is legitimate Microsoft Azure infrastructure. Standard monitoring applies.
Intelligence Summary:
The IP 20.107.176.118/32 is Microsoft Azure cloud infrastructure hosting checkpoint-service.com with a clean threat profile. No defensive action required. SOC teams may treat as benign cloud infrastructure.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 20.33.0.0/16 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 40% (Fair) |
| SPF | 2/2 domains |
| DMARC | 2/2 domains |
| FCrDNS | Not verified |
| DNSSEC | Not signed |
| CAA | Not configured |
| Domains Checked | 2 domains |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
CN=storeops-media.checkpoint-service.com was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | storeops-media.checkpoint-service.com |
| Valid From | 2026-07-17T19:18:21+00:00 |
| Valid Until | 2026-10-15T19:18:20+00:00 (expired) |
| TLS Protocol | Tls13 |
| Cipher Suite | TLS_AES_256_GCM_SHA384 |
| Signature Algorithm | sha384ECDSA |
| Validity Period | 89 days |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 20.64.0.0/10 |
| Route mapping | Found |
| HSTS | Not detected |
| CSP | Not detected |
| HTTP/2 | Not detected |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 33% | 2 | 4 |
| routing | 13% | 1 | 1 |
| services | 27% | 2 | 3 |
| ownership | 27% | 2 | 3 |
| reputation | 22% | 1 | 3 |
| geolocation | 43% | 2 | 5 |
| Overall | 27% | 10 | 19 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-15 16:16:25 UTC |
| Last Seen | 2026-10-05 07:51:40 UTC |
| Profile Built | 2026-10-05 07:56:50 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 29 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 20.107.176.118
Who owns the IP address 20.107.176.118?
20.107.176.118 is registered to Microsoft Corporation. The address falls within the 20.33.0.0/16 network block. Registration is held at ARIN.
Where is 20.107.176.118 located?
Geolocation data places 20.107.176.118 in Dublin, D, Ireland. The local time zone is Europe/Dublin. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 20.107.176.118 malicious or safe?
20.107.176.118 currently carries a high risk assessment, meaning indicators associated with malicious or abusive activity have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 20.107.176.118?
Responsive ports observed on 20.107.176.118 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 20.107.176.118 a VPN, proxy, or data center address?
20.107.176.118 is classified as cloud infrastructure and hosting infrastructure based on network ownership and behavioural analysis.