Critical Alert
Security alert: 4.197.236.174 rated 10/10 based on 13 verified incidents.
Threat profile indicates sustained malicious activity with 63% confidence rating.
More threatening than 91% of monitored IPs
IP Address
4.197.236.174
IPv4
Public
AU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
AU
Location
MICROSOFT-CORP-MSN-AS-BLO...
ASN 8075
13
Reports
Mixed
Data Source
Threat Categories
WP Login Brute Force
13
WP Admin Brute Force
3
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
63%
High Confidence
Confidence History
21. Aug 2025 - 31. Aug 2025
63%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Community | 75% | |
| WP Login Brute Force WP Admin Brute Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 4.197.236.174
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
AU
- ASN
- AS8075
- ISP
- MICROSOFT-CORP-MSN-AS-BLOCK
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 13
- First Reported
- 21 Aug 2025
- Last Reported
- 31 Aug 2025, 22:59
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
NL
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
5,598
Total IPs Monitored
99,055
Total Reports
17.7
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,598 IP addresses in our monitoring system. Out of these, 99,055 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,707 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
13
avg: 23
-
Network Comparison
Compared against 5,934 IPs in ASN 8075
Threat Level
10/10
network avg: 7.6
+
Total Reports
13
network avg: 17
-
Network MICROSOFT-CORP-MSN-AS-BLOCK has overall threat level 8/10
Geographic Comparison
Compared against 1,327 IPs in AU
Threat Level
10/10
country avg: 4.9
++
Total Reports
13
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
13
WP Admin Brute Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,375 threat incidents tracked globally • Last 24h: 18,936 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,136 15.5% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
135.236.141.8
8/10
Confidence
100%
Reports
120
Location
IE
IE
52.232.35.131
8/10
Confidence
100%
Reports
106
Location
NL
NL
168.63.79.147
8/10
Confidence
100%
Reports
88
Location
IE
IE
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
52.176.211.73
10/10
Confidence
100%
Reports
61
Location
US
US
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
20.116.34.103
10/10
Confidence
100%
Reports
47
Location
CA
CA
20.226.60.108
8/10
Confidence
100%
Reports
25
Location
BR
BR
20.151.117.104
8/10
Confidence
100%
Reports
23
Location
CA
CA
20.24.137.18
8/10
Confidence
100%
Reports
20
Location
SG
SG
20.116.59.164
8/10
Confidence
100%
Reports
18
Location
CA
CA
4.228.83.111
8/10
Confidence
100%
Reports
17
Location
BR
BR
20.224.168.82
10/10
Confidence
100%
Reports
16
Location
NL
NL
4.213.224.194
10/10
Confidence
100%
Reports
16
Location
IN
IN
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
98%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
ISP
MICROSOFT-CORP-...
4.197.162.185
10/10
Confidence
100%
Reports
206
ISP
MICROSOFT-CORP-...
103.100.38.132
10/10
Confidence
100%
Reports
45
ISP
Mammoth Media P...
139.99.194.30
10/10
Confidence
100%
Reports
24
ISP
OVH SAS
172.236.60.243
8/10
Confidence
99%
Reports
52
ISP
Akamai Connecte...
158.178.141.16
10/10
Confidence
99%
Reports
49
ISP
ORACLE-BMC-31898
103.230.156.120
8/10
Confidence
99%
Reports
32
ISP
Mammoth Media P...
20.42.220.101
10/10
Confidence
98%
Reports
185
ISP
MICROSOFT-CORP-...
68.218.109.167
10/10
Confidence
98%
Reports
75
ISP
MICROSOFT-CORP-...
4.197.176.207
10/10
Confidence
98%
Reports
70
ISP
MICROSOFT-CORP-...
4.197.236.122
10/10
Confidence
98%
Reports
63
ISP
MICROSOFT-CORP-...
68.218.89.201
10/10
Confidence
98%
Reports
60
ISP
MICROSOFT-CORP-...
68.218.117.11
10/10
Confidence
98%
Reports
59
ISP
MICROSOFT-CORP-...
4.196.65.89
10/10
Confidence
98%
Reports
56
ISP
MICROSOFT-CORP-...
4.197.208.98
10/10
Confidence
98%
Reports
40
ISP
MICROSOFT-CORP-...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.130.96.91
8/10
Confidence
63%
Reports
43,462
Location
US
US
3.134.148.59
8/10
Confidence
63%
Reports
14,980
Location
US
US
92.118.39.87
10/10
Confidence
63%
Reports
14,713
Location
US
US
87.120.191.13
10/10
Confidence
63%
Reports
13,131
Location
US
US
3.137.73.221
8/10
Confidence
63%
Reports
10,228
Location
US
US
3.132.23.201
8/10
Confidence
63%
Reports
9,576
Location
US
US
3.149.59.26
8/10
Confidence
63%
Reports
8,795
Location
US
US
167.250.224.25
10/10
Confidence
63%
Reports
8,244
Location
BR
BR
176.117.107.74
10/10
Confidence
63%
Reports
5,739
Location
NL
NL
142.202.188.211
10/10
Confidence
63%
Reports
4,136
Location
US
US
176.117.107.91
10/10
Confidence
63%
Reports
3,994
Location
NL
NL
196.251.70.234
10/10
Confidence
63%
Reports
3,796
Location
SC
SC
45.88.186.70
8/10
Confidence
63%
Reports
3,632
Location
NL
NL
2.57.122.209
10/10
Confidence
63%
Reports
2,573
Location
RO
RO
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203