# 20.115.232.8 — IP Intelligence Summary

20.115.232.8 is an IPv4 address operated by Microsoft Corporation (AS8075), geolocated to Quincy, United States. It belongs to datacenter or hosting infrastructure. As of November 2, 2026, IPDebrief rates it Moderate Risk (60/100); no anonymizing service was detected.

- Canonical page: https://ipdebrief.com/20.115.232.8
- Last updated: 2026-11-02

## Ownership

- Organization: Microsoft Corporation
- Network name: MSFT
- Allocated block: 20.33.0.0/16
- ASN: AS8075 (https://ipdebrief.com/asn/8075)
- Regional registry: ARIN
- Cloud / hosting provider: Microsoft Azure

## Location

- City: Quincy
- Region: WA
- Country: United States
- Time zone: America/Los_Angeles

## Network classification

- Infrastructure type: CloudCompute
- Datacenter / hosting: yes
- Residential: no
- Mobile: no
- Anycast: no
- Tor exit node: no
- VPN: no
- Proxy: no

## Risk assessment

- Assessment: Moderate Risk (60/100)
- Blocklist listings: 0
- Suspicious activity indicators: no
- Spam source: no

## Exposed services

- 80/tcp — http
- 443/tcp — https

## Analyst narrative

The subject IP 20.115.232.8 was identified as part of Microsoft Azure infrastructure (AS8075, MSFT). The address maintained a Moderate Risk reputation score of 60. Threat analysis correlated the IP with campaign infrastructure, resulting in a high severity recommendation to block traffic. Observations noted nineteen correlated IPs and nineteen certificate matches against *.azurewebsites.net domains.

Technical scans revealed open TCP ports 80 and 443. TLS certificate data confirmed issuance by Microsoft TLS G2 RSA CA OCSP 04. However, geolocation validation identified a contradiction where claimed physical location data conflicted with Round-Trip Time physics measurements, marking the geo data as implausible.

The address remained active between 2026-10-22 and 2026-11-02. Analysis recommended firewall rules for iptables, nginx, and pf to drop traffic from this source.

## Nearby addresses

- 20.115.232.2 (https://ipdebrief.com/20.115.232.2)
- 20.115.232.6 (https://ipdebrief.com/20.115.232.6)

## Addresses sharing infrastructure

- 13.85.16.224 — Same TLS certificate (https://ipdebrief.com/13.85.16.224)
- 13.89.172.3 — Same TLS certificate (https://ipdebrief.com/13.89.172.3)
- 20.42.128.98 — Same TLS certificate (https://ipdebrief.com/20.42.128.98)
- 20.49.97.10 — Same TLS certificate (https://ipdebrief.com/20.49.97.10)
- 20.49.104.19 — Same TLS certificate (https://ipdebrief.com/20.49.104.19)
- 20.49.104.20 — Same TLS certificate (https://ipdebrief.com/20.49.104.20)
- 20.105.216.13 — Same TLS certificate (https://ipdebrief.com/20.105.216.13)
- 20.105.224.27 — Same TLS certificate (https://ipdebrief.com/20.105.224.27)
- 20.118.48.3 — Same TLS certificate (https://ipdebrief.com/20.118.48.3)
- 20.118.138.130 — Same TLS certificate (https://ipdebrief.com/20.118.138.130)

---

Source: IPDebrief, "20.115.232.8 IP intelligence", https://ipdebrief.com/20.115.232.8, updated 2026-11-02. Assessments are probabilistic.