Critical Alert
Security alert: 4.197.89.232 rated 10/10 based on 22 verified incidents.
Threat profile indicates sustained malicious activity with 83% confidence rating.
More threatening than 94% of monitored IPs
IP Address
4.197.89.232
IPv4
Public
AU
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Top 10% High Threat
AU
Location
MICROSOFT-CORP-MSN-AS-BLO...
ASN 8075
22
Reports
Honeypot
Data Source
Threat Categories
WP Login Brute Force
22
WP Admin Brute Force
15
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
63%
High Confidence
Confidence History
20. Dec 2025 - 21. Dec 2025
83%
Current
Stable
Trend
Security Reports (22)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 4.197.89.232
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
AU
- ASN
- AS8075
- ISP
- MICROSOFT-CORP-MSN-AS-BLOCK
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 22
- First Reported
- 20 Dec 2025
- Last Reported
- 21 Dec 2025, 17:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5,400
Total IPs Monitored
104,493
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,400 IP addresses in our monitoring system. Out of these, 104,493 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 153,850 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
22
avg: 28
-
Network Comparison
Compared against 5,562 IPs in ASN 8075
Threat Level
10/10
network avg: 7.5
+
Total Reports
22
network avg: 18
+
Network MICROSOFT-CORP-MSN-AS-BLOCK has overall threat level 3/10
Geographic Comparison
Compared against 1,223 IPs in AU
Threat Level
10/10
country avg: 4.7
++
Total Reports
22
country avg: 9
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
15 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
22
WP Admin Brute Force
15
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
145,363 threat incidents tracked globally • Last 24h: 19,391 Logs
FEED
Top Threat Sources
-
01
United States32,793 22.6% -
02
China23,511 16.2% -
03
India15,734 10.8% -
04
Brazil7,030 4.8% -
05
Germany6,143 4.2%
-
06
Singapore5,764 4% -
07
Indonesia4,031 2.8% -
08
Netherlands3,758 2.6% -
09
Russia3,704 2.5% -
10
United Kingdom3,678 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
135.236.141.8
8/10
Confidence
100%
Reports
120
Location
IE
IE
52.232.35.131
8/10
Confidence
100%
Reports
106
Location
NL
NL
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
52.176.211.73
10/10
Confidence
100%
Reports
46
Location
US
US
20.116.34.103
10/10
Confidence
100%
Reports
40
Location
CA
CA
20.228.193.165
10/10
Confidence
100%
Reports
37
Location
US
US
20.24.137.18
8/10
Confidence
100%
Reports
20
Location
SG
SG
20.151.117.104
8/10
Confidence
100%
Reports
20
Location
CA
CA
135.235.138.43
10/10
Confidence
99%
Reports
108
Location
IN
IN
172.211.56.214
10/10
Confidence
99%
Reports
80
Location
NL
NL
20.203.59.187
10/10
Confidence
99%
Reports
45
Location
AE
AE
40.121.200.75
10/10
Confidence
99%
Reports
36
Location
US
US
52.232.19.79
10/10
Confidence
99%
Reports
23
Location
NL
NL
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
98%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
ISP
MICROSOFT-CORP-...
4.197.162.185
10/10
Confidence
100%
Reports
206
ISP
MICROSOFT-CORP-...
103.100.38.132
10/10
Confidence
100%
Reports
45
ISP
Mammoth Media P...
139.99.194.30
10/10
Confidence
100%
Reports
17
ISP
OVH SAS
172.236.60.243
8/10
Confidence
99%
Reports
52
ISP
Akamai Connecte...
103.230.156.120
8/10
Confidence
99%
Reports
32
ISP
Mammoth Media P...
20.42.220.101
10/10
Confidence
98%
Reports
185
ISP
MICROSOFT-CORP-...
68.218.109.167
10/10
Confidence
98%
Reports
75
ISP
MICROSOFT-CORP-...
4.197.176.207
10/10
Confidence
98%
Reports
70
ISP
MICROSOFT-CORP-...
4.197.236.122
10/10
Confidence
98%
Reports
63
ISP
MICROSOFT-CORP-...
68.218.89.201
10/10
Confidence
98%
Reports
60
ISP
MICROSOFT-CORP-...
68.218.117.11
10/10
Confidence
98%
Reports
59
ISP
MICROSOFT-CORP-...
4.196.65.89
10/10
Confidence
98%
Reports
56
ISP
MICROSOFT-CORP-...
4.197.208.98
10/10
Confidence
98%
Reports
40
ISP
MICROSOFT-CORP-...
68.218.100.201
10/10
Confidence
98%
Reports
38
ISP
MICROSOFT-CORP-...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a01:04f8:c012:4640:0000:0000:0000:0001
10/10
Confidence
83%
Reports
18,471
Location
DE
DE
207.90.244.3
8/10
Confidence
83%
Reports
12,356
Location
US
US
207.90.244.2
8/10
Confidence
83%
Reports
12,237
Location
US
US
147.182.225.86
8/10
Confidence
83%
Reports
8,389
Location
US
US
179.43.133.154
10/10
Confidence
83%
Reports
3,758
Location
CH
CH
2.57.122.208
10/10
Confidence
83%
Reports
2,772
Location
RO
RO
45.148.10.121
10/10
Confidence
83%
Reports
2,343
Location
NL
NL
137.184.95.216
8/10
Confidence
83%
Reports
2,028
Location
US
US
80.94.92.71
10/10
Confidence
83%
Reports
1,708
Location
RO
RO
64.62.156.162
8/10
Confidence
83%
Reports
533
Location
US
US
65.49.1.66
8/10
Confidence
83%
Reports
519
Location
US
US
216.218.206.67
10/10
Confidence
83%
Reports
485
Location
US
US
2.59.22.234
8/10
Confidence
83%
Reports
263
Location
AT
AT
66.240.236.119
10/10
Confidence
83%
Reports
259
Location
US
US
34.52.219.24
8/10
Confidence
83%
Reports
253
Location
BE
BE