Elevated Risk
Elevated threat level 8/10 for IP 52.167.144.197 from 15 reported incidents.
Behavioral profile indicates cyber threat activity with 43% confidence.
More threatening than 87% of monitored IPs
IP Address
52.167.144.197
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
US
Location
MICROSOFT-CORP-MSN-AS-BLO...
ASN 8075
15
Reports
Mixed
Data Source
Threat Categories
Brute-Force
13
DDoS Attack
1
Port Scan
1
Hacking
1
WP Cron Abuse
1
Web App Attack
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
26. August 2026
Last Activity
15. September 2026
Recent (7 days)
1 incidents
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
39%
Medium Confidence
Confidence History
12. Feb 2026 - 15. Sep 2026
43%
Current
Stable
Trend
Security Reports (15)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Port Scan Hacking WP Cron Abuse +1 | Community x2 | 75% | |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 52.167.144.197
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS8075
- ISP
- MICROSOFT-CORP-MSN-AS-BLOCK
DNS Information
- Reverse DNS
- msnbot-52-167-144-197.search.msn.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 15
- First Reported
- 12 Feb 2026
- Last Reported
- 15 Sep 2026, 16:16
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
NL
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
5,598
Total IPs Monitored
99,055
Total Reports
17.7
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,598 IP addresses in our monitoring system. Out of these, 99,055 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
87
%
Global Threat Ranking
This IP is more threatening than 87% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 767,385 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
15
avg: 9
++
Network Comparison
Compared against 11,101 IPs in ASN 8075
Threat Level
8/10
network avg: 7.6
=
Total Reports
15
network avg: 13
+
Network MICROSOFT-CORP-MSN-AS-BLOCK has overall threat level 8/10
Geographic Comparison
Compared against 134,879 IPs in US
Threat Level
8/10
country avg: 6.3
+
Total Reports
15
country avg: 19
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
5 Sep 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Tuesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
13
Web App Attack
1
Port Scan
1
Hacking
1
WP Cron Abuse
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 16:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
698,011 threat incidents tracked globally • Last 24h: 22,705 Logs
FEED
Top Threat Sources
-
01
United States134,839 19.3% -
02
Brazil109,415 15.7%
-
03
India75,788 10.9%
-
04
China43,104 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,468 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,803 2.3%
-
09
Pakistan15,197 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
4.206.92.183
10/10
Confidence
100%
Reports
98
Location
CA
CA
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
4.246.117.137
10/10
Confidence
100%
Reports
65
Location
US
US
172.172.214.224
10/10
Confidence
100%
Reports
60
Location
US
US
20.151.225.23
8/10
Confidence
100%
Reports
56
Location
CA
CA
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
172.172.131.149
10/10
Confidence
100%
Reports
49
Location
US
US
172.191.178.196
10/10
Confidence
100%
Reports
48
Location
US
US
172.191.94.172
10/10
Confidence
100%
Reports
46
Location
US
US
98.70.32.248
10/10
Confidence
100%
Reports
46
Location
IN
IN
4.182.219.135
10/10
Confidence
100%
Reports
45
Location
DE
DE
135.119.73.164
8/10
Confidence
100%
Reports
41
Location
US
US
20.13.164.162
10/10
Confidence
100%
Reports
37
Location
IE
IE
52.140.76.154
10/10
Confidence
100%
Reports
35
Location
IN
IN
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.1/10
Avg Threat
59%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
52.167.144.173
8/10
Confidence
85%
Reports
16
Location
US
US
52.167.144.206
10/10
Confidence
70%
Reports
14
Location
US
US
52.167.144.56
10/10
Confidence
67%
Reports
21
Location
US
US
52.167.144.166
10/10
Confidence
66%
Reports
20
Location
US
US
52.167.144.216
10/10
Confidence
66%
Reports
10
Location
US
US
52.167.144.162
7/10
Confidence
65%
Reports
10
Location
US
US
52.167.144.211
8/10
Confidence
63%
Reports
17
Location
US
US
52.167.144.172
10/10
Confidence
62%
Reports
9
Location
US
US
52.167.144.174
10/10
Confidence
57%
Reports
11
Location
US
US
52.167.144.16
7/10
Confidence
57%
Reports
6
Location
US
US
52.167.144.25
7/10
Confidence
55%
Reports
11
Location
US
US
52.167.144.147
10/10
Confidence
54%
Reports
16
Location
US
US
52.167.144.161
10/10
Confidence
54%
Reports
10
Location
US
US
52.167.144.220
10/10
Confidence
53%
Reports
7
Location
US
US
52.167.144.142
10/10
Confidence
51%
Reports
7
Location
US
US
52.167.144.55
10/10
Confidence
51%
Reports
4
Location
US
US
52.167.144.231
10/10
Confidence
50%
Reports
16
Location
US
US
52.167.144.184
10/10
Confidence
50%
Reports
11
Location
US
US
52.167.144.205
7/10
Confidence
50%
Reports
7
Location
US
US
52.167.144.18
7/10
Confidence
50%
Reports
6
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
92.118.39.77
10/10
Confidence
100%
Reports
296
ISP
Unmanaged Ltd
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
34.73.51.143
10/10
Confidence
100%
Reports
234
ISP
Google LLC
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
177
ISP
Limestone Netwo...
34.23.203.140
10/10
Confidence
100%
Reports
153
ISP
Google LLC
97.74.93.24
10/10
Confidence
100%
Reports
149
ISP
GoDaddy.com, LLC
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
72.167.50.103
8/10
Confidence
100%
Reports
129
ISP
GoDaddy.com, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.9/10
Avg Threat
43%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.220.101.10
8/10
Confidence
43%
Reports
50
Location
DE
DE
45.33.68.66
10/10
Confidence
43%
Reports
48
Location
US
US
142.93.120.13
8/10
Confidence
43%
Reports
48
Location
US
US
83.118.47.249
10/10
Confidence
43%
Reports
46
Location
TH
TH
185.193.157.163
8/10
Confidence
43%
Reports
40
Location
US
US
185.246.188.115
8/10
Confidence
43%
Reports
29
Location
NL
NL
103.139.144.127
7/10
Confidence
43%
Reports
23
Location
BD
BD
109.70.100.7
8/10
Confidence
43%
Reports
16
Location
AT
AT
92.205.167.152
8/10
Confidence
43%
Reports
16
Location
FR
FR
3.12.12.136
7/10
Confidence
43%
Reports
16
Location
US
US
193.189.100.195
8/10
Confidence
43%
Reports
15
Location
SE
SE
185.220.101.130
8/10
Confidence
43%
Reports
15
Location
DE
DE
54.206.20.150
7/10
Confidence
43%
Reports
15
Location
AU
AU
103.91.72.218
7/10
Confidence
43%
Reports
14
Location
IN
IN
74.7.241.190
7/10
Confidence
43%
Reports
13
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2