20.24.100.112📋 Copy

IP Intelligence Briefing: 20.24.100.112

Date: June 16, 2026

---

**1. Core Profile**

• Risk Score: Moderate (50/100)
• Network Owner: Microsoft Corporation (AS 8075, Microsoft Azure)
• Geolocation: Hong Kong (HK), inferred via geo-validation with ~9,173 km distance from probe.
• Network Role: Cloud compute instance (Microsoft Azure), no public services or ports open.
• Threat Indicators:

- Listed in 8 threat intelligence sources (high severity) as of June 16, 2026.

- No known spam, attacker, or Tor exit node associations.

---

**2. Observation History**

• Recent Activity (June 16, 2026):

- Flagged in 8 threat feeds (confidence: 85%).

- Geo-validation confirmed plausible location but with high round-trip time (avg 227ms).

• Historical Trends:

- No persistent malicious activity detected (0 threat persistence days).

- Stable network ownership (Microsoft Azure) since at least June 12, 2026.

---

**3. Relationships & Network Context**

• Linked Entities:

- Same network (MSFT, Microsoft Azure).

- No known malicious relationships or subnets.

• Subnet Analysis:

- 20.24.100.0/24 subnet: 0 abuse density, no active neighbors.

---

**4. Threat & Risk Assessment**

• Likely Scenario:

- Legitimate Microsoft Azure resource, but recently flagged in high-severity threat feeds.

- Possible false positive or compromised cloud instance.

• Actionable Steps:

- Investigate threat feed sources for false positives.

- Monitor for unusual outbound traffic or service enumeration.

- Consider blocking until verified (e.g., via Microsoft support).

---

Conclusion:

The IP is associated with Microsoft Azure and shows no direct malicious activity. However, recent high-severity threat listings warrant further investigation to rule out compromise or misclassification. SOC teams should validate the threat sources and ensure cloud security controls are enforced.

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.