Critical Alert
Security alert: 52.141.42.203 rated 10/10 based on 189 verified incidents.
Threat profile indicates sustained malicious activity with 98% confidence rating.
More threatening than 100% of monitored IPs
IP Address
52.141.42.203
IPv4
Public
KR
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Top 5% Most Dangerous
KR
Location
MICROSOFT-CORP-MSN-AS-BLO...
ASN 8075
189
Reports
Honeypot
Data Source
Threat Categories
WP Login Brute Force
30
WP Admin Brute Force
30
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
64%
High Confidence
Confidence History
4. Jan 2026 - 7. Jan 2026
98%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 52.141.42.203
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS8075
- ISP
- MICROSOFT-CORP-MSN-AS-BLOCK
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 189
- First Reported
- 30 Dec 2025
- Last Reported
- 7 Jan 2026, 03:55
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5,400
Total IPs Monitored
104,493
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,400 IP addresses in our monitoring system. Out of these, 104,493 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 154,349 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
189
avg: 28
++
Network Comparison
Compared against 5,565 IPs in ASN 8075
Threat Level
10/10
network avg: 7.5
+
Total Reports
189
network avg: 18
++
Network MICROSOFT-CORP-MSN-AS-BLOCK has overall threat level 3/10
Geographic Comparison
Compared against 2,025 IPs in KR
Threat Level
10/10
country avg: 4.9
++
Total Reports
189
country avg: 20
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
52 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
189
WP Admin Brute Force
188
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 19:00 with 12 reports
Weekly Activity
Geographic Threat Distribution
145,767 threat incidents tracked globally • Last 24h: 18,538 Logs
FEED
Top Threat Sources
-
01
United States32,853 22.5% -
02
China23,525 16.1% -
03
India15,871 10.9% -
04
Brazil7,074 4.9% -
05
Germany6,157 4.2%
-
06
Singapore5,769 4% -
07
Indonesia4,042 2.8% -
08
Netherlands3,769 2.6% -
09
Russia3,709 2.5% -
10
United Kingdom3,679 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
135.236.141.8
8/10
Confidence
100%
Reports
120
Location
IE
IE
52.232.35.131
8/10
Confidence
100%
Reports
106
Location
NL
NL
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
52.176.211.73
10/10
Confidence
100%
Reports
46
Location
US
US
20.116.34.103
10/10
Confidence
100%
Reports
40
Location
CA
CA
20.228.193.165
10/10
Confidence
100%
Reports
37
Location
US
US
20.24.137.18
8/10
Confidence
100%
Reports
20
Location
SG
SG
20.151.117.104
8/10
Confidence
100%
Reports
20
Location
CA
CA
135.235.138.43
10/10
Confidence
99%
Reports
108
Location
IN
IN
172.211.56.214
10/10
Confidence
99%
Reports
80
Location
NL
NL
20.203.59.187
10/10
Confidence
99%
Reports
45
Location
AE
AE
40.121.200.75
10/10
Confidence
99%
Reports
36
Location
US
US
52.232.19.79
10/10
Confidence
99%
Reports
23
Location
NL
NL
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
62%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
221.139.88.149
10/10
Confidence
100%
Reports
168
ISP
SK Broadband Co...
220.71.199.64
10/10
Confidence
100%
Reports
135
ISP
Korea Telecom
118.47.200.96
10/10
Confidence
100%
Reports
71
ISP
Korea Telecom
27.119.7.6
8/10
Confidence
100%
Reports
64
ISP
SK Broadband Co...
115.178.75.242
10/10
Confidence
100%
Reports
34
ISP
SK Broadband Co...
211.228.218.47
10/10
Confidence
100%
Reports
32
ISP
Korea Telecom
121.168.139.251
10/10
Confidence
99%
Reports
130
ISP
Korea Telecom
193.123.245.198
8/10
Confidence
99%
Reports
97
ISP
ORACLE-BMC-31898
58.229.141.26
10/10
Confidence
99%
Reports
79
ISP
SK Broadband Co...
121.179.119.204
8/10
Confidence
99%
Reports
68
ISP
Korea Telecom
1.222.42.237
10/10
Confidence
99%
Reports
67
ISP
LG DACOM Corpor...
175.118.127.138
10/10
Confidence
99%
Reports
59
ISP
SK Broadband Co...
220.119.37.141
10/10
Confidence
99%
Reports
49
ISP
Korea Telecom
119.205.179.217
10/10
Confidence
99%
Reports
47
ISP
Korea Telecom
112.217.199.222
10/10
Confidence
99%
Reports
42
ISP
LG DACOM Corpor...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.251.64.146
10/10
Confidence
98%
Reports
677
Location
US
US
106.75.186.101
10/10
Confidence
98%
Reports
612
Location
CN
CN
106.75.164.40
10/10
Confidence
98%
Reports
606
Location
CN
CN
106.75.190.150
10/10
Confidence
98%
Reports
568
Location
CN
CN
103.189.234.69
8/10
Confidence
98%
Reports
445
Location
ID
ID
20.89.17.172
10/10
Confidence
98%
Reports
400
Location
JP
JP
207.90.244.19
8/10
Confidence
98%
Reports
383
Location
US
US
146.148.26.145
10/10
Confidence
98%
Reports
229
Location
BE
BE
4.194.133.126
10/10
Confidence
98%
Reports
220
Location
SG
SG
74.176.59.137
10/10
Confidence
98%
Reports
219
Location
JP
JP
4.213.160.187
10/10
Confidence
98%
Reports
204
Location
IN
IN
27.111.32.174
10/10
Confidence
98%
Reports
199
Location
ID
ID
103.59.95.177
10/10
Confidence
98%
Reports
194
Location
ID
ID
181.23.107.93
10/10
Confidence
98%
Reports
192
Location
AR
AR
52.147.68.81
10/10
Confidence
98%
Reports
190
Location
JP
JP