Critical Alert
Security alert: 68.218.109.167 rated 10/10 based on 75 verified incidents.
Threat profile indicates sustained malicious activity with 98% confidence rating.
More threatening than 100% of monitored IPs
IP Address
68.218.109.167
IPv4
Public
AU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
AU
Location
MICROSOFT-CORP-MSN-AS-BLO...
ASN 8075
75
Reports
Honeypot
Data Source
Threat Categories
WP Login Brute Force
30
WP Admin Brute Force
30
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
63%
High Confidence
Confidence History
22. Dec 2025 - 25. Dec 2025
98%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 68.218.109.167
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
AU
- ASN
- AS8075
- ISP
- MICROSOFT-CORP-MSN-AS-BLOCK
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 75
- First Reported
- 19 Dec 2025
- Last Reported
- 25 Dec 2025, 03:13
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
NL
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
5,598
Total IPs Monitored
99,055
Total Reports
17.7
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,598 IP addresses in our monitoring system. Out of these, 99,055 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 198,726 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
75
avg: 23
++
Network Comparison
Compared against 5,919 IPs in ASN 8075
Threat Level
10/10
network avg: 7.6
+
Total Reports
75
network avg: 17
++
Network MICROSOFT-CORP-MSN-AS-BLOCK has overall threat level 8/10
Geographic Comparison
Compared against 1,327 IPs in AU
Threat Level
10/10
country avg: 4.9
++
Total Reports
75
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
33 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
75
WP Admin Brute Force
63
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 10 reports
Weekly Activity
Geographic Threat Distribution
186,492 threat incidents tracked globally • Last 24h: 18,626 Logs
FEED
Top Threat Sources
-
01
United States38,327 20.6% -
02
India28,856 15.5% -
03
China25,964 13.9% -
04
Brazil10,206 5.5% -
05
Germany7,130 3.8% -
06
Singapore6,453 3.5% -
07
Indonesia5,496 2.9% -
08
Russia4,694 2.5% -
09
Pakistan4,633 2.5% -
10
Netherlands4,351 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
135.236.141.8
8/10
Confidence
100%
Reports
120
Location
IE
IE
52.232.35.131
8/10
Confidence
100%
Reports
106
Location
NL
NL
168.63.79.147
8/10
Confidence
100%
Reports
81
Location
IE
IE
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
52.176.211.73
10/10
Confidence
100%
Reports
60
Location
US
US
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
20.116.34.103
10/10
Confidence
100%
Reports
47
Location
CA
CA
20.226.60.108
8/10
Confidence
100%
Reports
25
Location
BR
BR
20.151.117.104
8/10
Confidence
100%
Reports
23
Location
CA
CA
20.24.137.18
8/10
Confidence
100%
Reports
20
Location
SG
SG
20.116.59.164
8/10
Confidence
100%
Reports
18
Location
CA
CA
4.228.83.111
8/10
Confidence
100%
Reports
17
Location
BR
BR
4.213.224.194
10/10
Confidence
100%
Reports
16
Location
IN
IN
20.203.59.187
10/10
Confidence
99%
Reports
58
Location
AE
AE
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
ISP
MICROSOFT-CORP-...
4.197.162.185
10/10
Confidence
100%
Reports
206
ISP
MICROSOFT-CORP-...
103.100.38.132
10/10
Confidence
100%
Reports
45
ISP
Mammoth Media P...
139.99.194.30
10/10
Confidence
100%
Reports
24
ISP
OVH SAS
172.236.60.243
8/10
Confidence
99%
Reports
52
ISP
Akamai Connecte...
158.178.141.16
10/10
Confidence
99%
Reports
49
ISP
ORACLE-BMC-31898
103.230.156.120
8/10
Confidence
99%
Reports
32
ISP
Mammoth Media P...
20.42.220.101
10/10
Confidence
98%
Reports
185
ISP
MICROSOFT-CORP-...
4.197.176.207
10/10
Confidence
98%
Reports
70
ISP
MICROSOFT-CORP-...
4.197.236.122
10/10
Confidence
98%
Reports
63
ISP
MICROSOFT-CORP-...
68.218.89.201
10/10
Confidence
98%
Reports
60
ISP
MICROSOFT-CORP-...
68.218.117.11
10/10
Confidence
98%
Reports
59
ISP
MICROSOFT-CORP-...
4.196.65.89
10/10
Confidence
98%
Reports
56
ISP
MICROSOFT-CORP-...
4.197.208.98
10/10
Confidence
98%
Reports
40
ISP
MICROSOFT-CORP-...
68.218.100.201
10/10
Confidence
98%
Reports
38
ISP
MICROSOFT-CORP-...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.251.64.146
10/10
Confidence
98%
Reports
1,927
Location
US
US
193.32.162.35
10/10
Confidence
98%
Reports
992
Location
RO
RO
106.75.190.150
10/10
Confidence
98%
Reports
673
Location
CN
CN
207.90.244.19
8/10
Confidence
98%
Reports
452
Location
US
US
85.11.167.7
10/10
Confidence
98%
Reports
452
Location
BG
BG
103.189.234.69
8/10
Confidence
98%
Reports
445
Location
ID
ID
20.89.17.172
10/10
Confidence
98%
Reports
400
Location
JP
JP
146.148.26.145
10/10
Confidence
98%
Reports
229
Location
BE
BE
4.194.133.126
10/10
Confidence
98%
Reports
220
Location
SG
SG
74.176.59.137
10/10
Confidence
98%
Reports
219
Location
JP
JP
4.213.160.187
10/10
Confidence
98%
Reports
204
Location
IN
IN
103.59.95.177
10/10
Confidence
98%
Reports
194
Location
ID
ID
181.23.107.93
10/10
Confidence
98%
Reports
192
Location
AR
AR
52.147.68.81
10/10
Confidence
98%
Reports
190
Location
JP
JP
52.141.42.203
10/10
Confidence
98%
Reports
189
Location
KR
KR
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203