Substantial Risk
Threat level 7/10 for 52.167.144.227 based on 7 documented incidents.
Consistent suspicious behavior patterns. 63% confidence rating.
More threatening than 86% of monitored IPs
IP Address
52.167.144.227
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
Microsoft Corporation
ASN 8075
7
Reports
Mixed
Data Source
Threat Categories
Bad Web Bot
4
WP Content Scraping
4
Brute-Force
3
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
16. October 2026
Last Activity
17. October 2026
Recent (7 days)
4 incidents
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Immediate monitoring recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
1/10
Very Low
Confidence Score
63%
High Confidence
Confidence History
30. Jul 2026 - 17. Oct 2026
63%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 52.167.144.227
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS8075
- ISP
- Microsoft Corporation
DNS Information
- Reverse DNS
- msnbot-52-167-144-227.search.msn.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 7
- First Reported
- 30 Jul 2026
- Last Reported
- 17 Oct 2026, 14:57
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
NL
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
5,598
Total IPs Monitored
99,055
Total Reports
17.7
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,598 IP addresses in our monitoring system. Out of these, 99,055 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
86
%
Global Threat Ranking
This IP is more threatening than 86% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,019,031 reported IPs worldwide
Threat Level
7/10
avg: 6.2
=
Total Reports
7
avg: 8
=
Network Comparison
Compared against 12,901 IPs in ASN 8075
Threat Level
7/10
network avg: 8.0
=
Total Reports
7
network avg: 12
-
Network Microsoft Corporation has overall threat level 8/10
Geographic Comparison
Compared against 182,127 IPs in US
Threat Level
7/10
country avg: 6.6
=
Total Reports
7
country avg: 17
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
17 Oct 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Saturday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
4/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
4
WP Content Scraping
4
Brute-Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
929,286 threat incidents tracked globally • Last 24h: 206,289 Logs
FEED
Top Threat Sources
-
01
United States182,262 19.6% -
02
Brazil162,913 17.5%
-
03
India94,486 10.2%
-
04
China47,796 5.1%
-
05
SC29,342 3.2%
-
06
Argentina25,563 2.8%
-
07
Germany20,112 2.2%
-
08
Pakistan19,431 2.1%
-
09
Netherlands18,842 2%
-
10
Colombia18,592 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
20.77.26.9
10/10
Confidence
100%
Reports
33
Location
GB
GB
20.229.185.186
10/10
Confidence
100%
Reports
24
Location
NL
NL
51.124.186.154
10/10
Confidence
100%
Reports
18
Location
NL
NL
74.162.106.25
10/10
Confidence
100%
Reports
18
Location
AE
AE
20.207.123.15
10/10
Confidence
100%
Reports
15
Location
IN
IN
20.89.68.9
10/10
Confidence
99%
Reports
19
Location
JP
JP
158.158.37.2
8/10
Confidence
98%
Reports
15
Location
ES
ES
13.72.83.77
10/10
Confidence
97%
Reports
16
Location
US
US
52.173.67.116
10/10
Confidence
96%
Reports
60
Location
US
US
20.5.85.204
10/10
Confidence
96%
Reports
25
Location
AU
AU
20.251.194.156
10/10
Confidence
96%
Reports
22
Location
NO
NO
20.244.17.248
10/10
Confidence
96%
Reports
22
Location
IN
IN
23.97.182.38
10/10
Confidence
96%
Reports
22
Location
NL
NL
98.70.50.166
10/10
Confidence
95%
Reports
34
Location
IN
IN
20.219.91.90
10/10
Confidence
95%
Reports
23
Location
IN
IN
4.224.40.94
10/10
Confidence
95%
Reports
22
Location
IN
IN
68.219.102.153
10/10
Confidence
95%
Reports
21
Location
IE
IE
20.106.202.68
10/10
Confidence
95%
Reports
19
Location
US
US
20.55.45.217
10/10
Confidence
95%
Reports
18
Location
US
US
172.209.208.96
10/10
Confidence
94%
Reports
48
Location
ZA
ZA
IPs from the same subnet range, likely same network segment.
20
Related IPs
7.5/10
Avg Threat
77%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
52.167.144.232
8/10
Confidence
84%
Reports
16
Location
US
US
52.167.144.156
8/10
Confidence
84%
Reports
10
Location
US
US
52.167.144.173
8/10
Confidence
83%
Reports
23
Location
US
US
52.167.144.161
8/10
Confidence
83%
Reports
17
Location
US
US
52.167.144.183
8/10
Confidence
83%
Reports
16
Location
US
US
52.167.144.138
7/10
Confidence
82%
Reports
11
Location
US
US
52.167.144.199
7/10
Confidence
81%
Reports
10
Location
US
US
52.167.144.189
7/10
Confidence
78%
Reports
16
Location
US
US
52.167.144.177
7/10
Confidence
78%
Reports
6
Location
US
US
52.167.144.206
8/10
Confidence
77%
Reports
20
Location
US
US
52.167.144.197
8/10
Confidence
75%
Reports
23
Location
US
US
52.167.144.175
7/10
Confidence
75%
Reports
8
Location
US
US
52.167.144.222
7/10
Confidence
74%
Reports
13
Location
US
US
52.167.144.166
7/10
Confidence
73%
Reports
29
Location
US
US
52.167.144.204
8/10
Confidence
73%
Reports
15
Location
US
US
52.167.144.180
7/10
Confidence
72%
Reports
10
Location
US
US
52.167.144.216
8/10
Confidence
70%
Reports
15
Location
US
US
52.167.144.160
7/10
Confidence
70%
Reports
13
Location
US
US
52.167.144.195
8/10
Confidence
70%
Reports
13
Location
US
US
52.167.144.16
7/10
Confidence
70%
Reports
11
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.70.67.198
8/10
Confidence
100%
Reports
80
ISP
Google LLC
2602:fa59:10:12f::1
10/10
Confidence
100%
Reports
42
ISP
RouterHosting LLC
136.71.31.178
8/10
Confidence
100%
Reports
41
ISP
Google LLC
136.70.242.68
8/10
Confidence
100%
Reports
40
ISP
Google LLC
34.11.81.227
8/10
Confidence
100%
Reports
31
ISP
Google LLC
166.62.41.13
10/10
Confidence
100%
Reports
30
ISP
GoDaddy.com, LLC
71.27.86.44
10/10
Confidence
100%
Reports
29
ISP
Comcast Cable C...
77.239.124.46
10/10
Confidence
100%
Reports
27
ISP
Banatsync Srl
159.223.97.218
10/10
Confidence
100%
Reports
26
ISP
DigitalOcean, LLC
136.70.235.57
8/10
Confidence
100%
Reports
23
ISP
Google LLC
34.53.37.173
8/10
Confidence
100%
Reports
23
ISP
Google LLC
136.0.39.68
10/10
Confidence
100%
Reports
23
ISP
CNServer LLC
129.121.99.2
10/10
Confidence
100%
Reports
22
ISP
Oracle Corporation
157.230.218.106
10/10
Confidence
100%
Reports
22
ISP
DigitalOcean, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
6/10
Avg Threat
63%
Avg Confidence
198.13.208.200
6/10
Confidence
63%
Reports
8
Location
US
US
195.81.101.190
6/10
Confidence
63%
Reports
8
Location
BE
BE
151.244.45.121
6/10
Confidence
63%
Reports
8
Location
US
US
151.244.49.138
6/10
Confidence
63%
Reports
8
Location
US
US
31.105.121.40
6/10
Confidence
63%
Reports
8
Location
US
US
104.165.230.173
6/10
Confidence
63%
Reports
8
Location
US
US
195.81.138.70
6/10
Confidence
63%
Reports
8
Location
FR
FR
104.204.201.97
6/10
Confidence
63%
Reports
8
Location
US
US
176.223.170.41
6/10
Confidence
63%
Reports
8
Location
US
US
162.43.244.255
6/10
Confidence
63%
Reports
8
Location
US
US
202.51.84.123
6/10
Confidence
63%
Reports
8
Location
US
US
202.81.210.83
6/10
Confidence
63%
Reports
8
Location
US
US
62.101.173.219
6/10
Confidence
63%
Reports
8
Location
US
US
188.212.120.218
6/10
Confidence
63%
Reports
8
Location
US
US
185.249.237.4
6/10
Confidence
63%
Reports
8
Location
US
US