4.237.73.178
## THREAT INTELLIGENCE BRIEFING: 4.237.73.178
Classification: LOW RISK – Legitimate Cloud Infrastructure
Report Generated: 2026-08-05
Intel Confidence: HIGH
---
EXECUTIVE SUMMARY
IP address 4.237.73.178 is a Microsoft Azure cloud compute endpoint located in Sydney, Australia (AS8075). The IP demonstrates a clean security posture with no malicious indicators, zero abuse history, and no blacklist listings. This is a benign cloud infrastructure asset with standard web server services. No defensive actions recommended.
---
OWNERSHIP & GEOLOCATION
| Attribute | Value |
|---|---|
| **Organization** | Microsoft Corporation |
| **ASN** | AS8075 |
| **NetName** | MSFT |
| **CIDR Block** | 4.224.0.0/12 |
| **Country** | Australia (AU) |
| **Region** | NSW, Sydney |
| **Timezone** | Australia/Sydney |
| **Infrastructure Type** | Cloud Compute (Azure) |
| **Cloud Provider** | Microsoft Azure |
---
NETWORK SERVICES
| Port | Protocol | Service | Status |
|---|---|---|---|
| 22 | TCP | SSH | Open |
| 80 | TCP | HTTP | Open |
| 443 | TCP | HTTPS | Open |
Server Fingerprint: nginx/1.18.0 (Ubuntu)
Security Headers: HSTS enabled, HTTP/2 supported
TLS Certificate: Let's Encrypt (CN=footscanbackenddev.authotics.au)
Certificate Issuer: YR2, O=Let's Encrypt, C=US
---
THREAT ASSESSMENT
| Indicator | Status |
|---|---|
| **Risk Score** | 0 (Clean) |
| **Provider Score** | 0 (Clean) |
| **Authority Score** | 0 (Clean) |
| **Abuse Confidence** | N/A |
| **Blacklist Count** | 0 |
| **Threat Feeds** | None |
| **Known Campaigns** | None |
| **Tor Exit Node** | No |
| **Known Attacker** | No |
| **Spam Source** | No |
| **VPS/Hosting** | Yes (Legitimate Azure) |
Campaign Likelihood: None
Threat Persistence: 0 days
---
NETWORK CONTEXT
Subnet Analysis (4.237.73.0/24):
- Abuse Density: 0 (Clean)
- Classification: Clean
- Threat Siblings: 0
- Active Siblings: 1
- Inherited Risk: 0
Relationships: 8 relationships detected, all linked to Microsoft (MSFT) network infrastructure.
---
OBSERVATION HISTORY
Signal Count: 21 observations
Recent Activity: Last observed 2026-08-05 13:07 UTC
Temporal Trends:
- Ownership Changes: 0
- Threat Observation Count: 0
- Is Persistently Malicious: False
- Route Stability: Unstable (route changes detected)
Historical Classification: Consistently classified as "clean" across all observations
---
CONTROL PLANE DATA
| Attribute | Value |
|---|---|
| **BGP Prefix** | 4.224.0.0/12 |
| **Origin ASN** | 8075 |
| **Route Stable** | False |
| **DNSSEC Valid** | Yes |
| **DNSBL Listed** | 0/8 lists |
| **Operator Score** | 0.1304 (Minimal) |
---
SECURITY ACTIONS & RECOMMENDATIONS
Risk Score: 0
Recommended Actions: None
Firewall Rules: Not required
Assessment: This IP is a legitimate Microsoft Azure cloud endpoint with standard web server functionality. No blocking or rate-limiting actions are recommended. The IP operates within normal Microsoft infrastructure parameters.
---
INTELLIGENCE CONCLUSION
IP 4.237.73.178 is a benign Microsoft Azure cloud compute resource located in Sydney, Australia. The IP shows no malicious indicators, has a clean reputation, and operates as a standard web server (nginx). The associated domain (footscanbackenddev.authotics.au) indicates legitimate development infrastructure. SOC analysts may monitor the IP for operational context but no defensive blocking is warranted.
This summary was generated by AI and may contain inaccuracies. Verify critical details independently.
🏢 Ownership & Registration
| Organization | Microsoft Corporation |
| ASN | AS8075 |
| Network Name | MSFT |
| CIDR Block | 4.224.0.0/12 |
| RIR | ARIN |
| Country | United States |
| Abuse Contact | Available via RDAP |
🌐 DNS Intelligence
| PTR Record | No PTR |
| Forward Confirmed | No — PTR hostname does not resolve back to this IP (weak signal) |
🔐 DNS Hygiene
| Hygiene Score | 20% (Poor) |
| SPF | Not configured |
| DMARC | Not configured |
| FCrDNS | Not verified |
| DNSSEC | Valid |
| CAA | Not configured |
☁️ Network Classification
| Infrastructure | Infrastructure / Datacenter |
| Service Purpose | Web Server |
| Network Tier | Hosting — Infrastructure provider without advanced routing |
🔌 Services & Open Ports
| Port | Service | Protocol | Banner |
|---|---|---|---|
| 80 | http | tcp | — |
| 443 | https | tcp | — |
| 22 | ssh | tcp | Banner detected |
| Closed Ports | 25, 3389, 8080, 8443 (3 open / 7 scanned) | ||
| Server | Web server detected |
| HTTP Title | — |
🔐 TLS Certificate
CN=footscanbackenddev.authotics.au was found on this IP. This may indicate a previously hosted website, a decommissioned service, or stale infrastructure.| SANs | footscanbackenddev.authotics.au |
| Valid From | 2026-06-20T01:16:56+00:00 |
| Valid Until | 2026-09-18T01:16:55+00:00 (expired) |
🛡️ Public Network Snapshot
| Origin ASN | AS8075 |
| Network Prefix | 4.224.0.0/12 |
| Route mapping | Found |
| HSTS | Enabled |
| CSP | Not detected |
| HTTP/2 | Enabled |
🎯 Confidence Breakdown
Per-dimension confidence scores based on source diversity and data freshness
| Dimension | Score | Sources | Observations |
|---|---|---|---|
| threat | 27% | 2 | 7 |
| routing | 8% | 1 | 1 |
| services | 22% | 2 | 4 |
| ownership | 20% | 2 | 3 |
| reputation | 25% | 1 | 5 |
| geolocation | 17% | 2 | 3 |
| Overall | 20% | 10 | 23 |
| Data Coherence | Consistent (100%) |
| Attribution | Moderate (50%) |
| OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid |
📅 Observation Timeline 🔄 Live
| First Seen | 2026-07-18 17:43:10 UTC |
| Last Seen | 2026-09-14 18:52:03 UTC |
| Profile Built | 2026-09-14 19:01:46 UTC |
| Data Freshness | Live |
| Signal Types | 23 |
| Total Observations | 36 |
Full dossier details are available via our API.
❓ Frequently Asked Questions About 4.237.73.178
Who owns the IP address 4.237.73.178?
4.237.73.178 is registered to Microsoft Corporation. The address falls within the 4.224.0.0/12 network block. Registration is held at ARIN.
Where is 4.237.73.178 located?
Geolocation data places 4.237.73.178 in Sydney, NSW, Australia. The local time zone is Australia/Sydney. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.
Is 4.237.73.178 malicious or safe?
4.237.73.178 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.
What ports are open on 4.237.73.178?
Responsive ports observed on 4.237.73.178 include 80, 443, 22. Port visibility reflects the most recent scan and may change as the host's configuration or firewall rules change.
Is 4.237.73.178 a VPN, proxy, or data center address?
4.237.73.178 is classified as cloud infrastructure based on network ownership and behavioural analysis.