IP Address

23.132.164.173

IPv4 Public
GB GB
AS60223
Netiface Limited
1,330 Reports
This IP is under Observation Suspicious activity detected - monitor closely
5/10 Threat
55% Confidence
1,330 Reports

Threat Intelligence Analysis

AI-generated security assessment based on aggregated threat data

Below Average Risk
GB
GB Location
Netiface Limited ASN 60223
1,330 Reports
Honeypot Data Source

Cautionary Risk

IP 23.132.164.173 is a medium-risk address with 1330 total abuse reports where Email Spam dominates the recent threat activity detected by automated honeypot sensors in the United Kingdom during December 2025.

The IP belongs to Netiface Limited operating under ASN AS60223 and is geolocated in Great Britain. The 55% confidence score indicates moderate certainty in the attribution, while the 1330 total reports over the observed period suggests persistent abusive behaviour. However, the dominant threat category of Email Spam accounts for 20 recent reports specifically, all sourced from automated honeypot sensors. The activity frequency metric of 0/10 indicates very low detected activity at the present time, though the historical report volume demonstrates this address has been repeatedly flagged for abuse.

Email Spam represents mass-distribution of unwanted electronic mail, typically employed for advertising purposes, phishing campaigns, or malware delivery. For organizations running exposed SMTP services, this pattern means their mail infrastructure may be targeted for relay attempts, dictionary attacks against valid accounts, or distribution of malicious payloads to internal users and external contacts. The volume of prior reports suggests this IP has been used in sustained spam operations rather than isolated probing.

Site operators should implement sender authentication protocols including SPF, DKIM, and DMARC to validate legitimate mail origins and reject spoofed messages. Deploying reputable email filtering services can block known spam sources and detect anomalous outbound traffic patterns. Rate-limiting authentication attempts on exposed mail services and monitoring logs for relay abuse helps identify compromise. Tools such as fail2ban can automatically block IPs exhibiting suspicious SMTP behaviour, reducing the window of exposure.

More threatening than 29% of monitored IPs

Threat Categories

Email Spam 30

Technical Details

Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.

Recommended Mitigations

Implement SPF, DKIM, DMARC, and use reputable email filtering services.

Reputable Network

This IP is hosted on a network (ASN 60223) with generally good reputation. The ISP Netiface Limited maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 5/10 Medium
Medium
Activity Frequency 0/10 Inactive
Confidence Score 55% High Confidence

Confidence History

30. Dec 2025
55% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%

Technical Details

Basic Information

IP Address
23.132.164.173
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
GB GB
ASN
AS60223
ISP
Netiface Limited

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
1,330
First Reported
12 Dec 2025
Last Reported
30 Dec 2025, 02:54

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS60223
Netiface Limited
NL NL

Network Threat Assessment

3/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

150
Total IPs Monitored
22,137
Total Reports
147.6
Reports per IP

Network Context

This IP address belongs to Netiface Limited (AS60223), which manages 150 IP addresses in our monitoring system. Out of these, 22,137 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

29 %

Global Threat Ranking

This IP is more threatening than 29% of all IPs in our database.

Below Average Threat

Global Comparison

Compared against 199,613 reported IPs worldwide

Threat Level 5/10 avg: 5.3 =
Total Reports 1,330 avg: 23 ++

Network Comparison

Compared against 165 IPs in ASN 60223

Threat Level 5/10 network avg: 7.6 -
Total Reports 1,330 network avg: 140 ++
Network Netiface Limited has overall threat level 3/10

Geographic Comparison

Compared against 4,299 IPs in GB

Threat Level 5/10 country avg: 5.4 =
Total Reports 1,330 country avg: 27 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

187,273 threat incidents tracked globally • Last 24h: 18,965 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    38,457 20.5%
  2. 02
    IN
    India IN
    29,090 15.5%
  3. 03
    CN
    China CN
    26,027 13.9%
  4. 04
    BR
    Brazil BR
    10,256 5.5%
  5. 05
    DE
    Germany DE
    7,143 3.8%
  6. 06
    SG
    Singapore SG
    6,476 3.5%
  7. 07
    ID
    Indonesia ID
    5,543 3%
  8. 08
    RU
    Russia RU
    4,703 2.5%
  9. 09
    PK
    Pakistan PK
    4,670 2.5%
  10. 10
    NL
    Netherlands NL
    4,357 2.3%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
8.9/10 Avg Threat
95% Avg Confidence
20 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "23.132.164.173",
    "threat_level": 5,
    "confidence_score": 55,
    "total_reports": 1330,
    "country_code": "GB",
    "isp_name": "Netiface Limited",
    "asn": "60223",
    "first_reported": "2025-12-12 13:00:15",
    "last_reported": "2025-12-30 02:54:55",
    "exported_at": "2026-06-09T10:09:08+02:00",
    "source": "https://reportedip.de/ip/23.132.164.173/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.