Critical Alert
Security alert: 20.153.204.5 rated 10/10 based on 35 verified incidents.
Threat profile indicates sustained malicious activity with 100% confidence rating.
More threatening than 100% of monitored IPs
IP Address
20.153.204.5
IPv4
Public
JP
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
JP
Location
Microsoft Corporation
ASN 8069
35
Reports
Honeypot
Data Source
Threat Categories
SSH
27
Hacking
13
Exploited Host
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
16. May 2026
Last Activity
8. June 2026
Recent (7 days)
6 incidents
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
7. Apr 2026 - 8. Jun 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Exploited Host | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 20.153.204.5
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
JP
- ASN
- AS8069
- ISP
- Microsoft Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 35
- First Reported
- 22 Mar 2026
- Last Reported
- 8 Jun 2026, 11:13
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8069
Microsoft Corporation
JP
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
2
Total IPs Monitored
19
Total Reports
9.5
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8069), which manages 2 IP addresses in our monitoring system. Out of these, 19 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,576 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
35
avg: 23
++
Network Comparison
Compared against 6 IPs in ASN 8069
Threat Level
10/10
network avg: 7.7
+
Total Reports
35
network avg: 14
++
Network Microsoft Corporation has overall threat level 4/10
Geographic Comparison
Compared against 2,545 IPs in JP
Threat Level
10/10
country avg: 6.4
++
Total Reports
35
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
24 May 2026
6 reports
Daily Average
0.7
reports/day
Most Active
Sunday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
32
Hacking
15
Exploited Host
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
7.2/10
Avg Threat
39%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
20.27.219.18
10/10
Confidence
100%
Reports
449
ISP
MICROSOFT-CORP-...
4.190.210.95
10/10
Confidence
100%
Reports
197
ISP
MICROSOFT-CORP-...
141.147.175.186
10/10
Confidence
100%
Reports
56
ISP
ORACLE-BMC-31898
43.165.185.71
10/10
Confidence
100%
Reports
49
ISP
Tencent Buildin...
165.154.231.46
10/10
Confidence
100%
Reports
35
ISP
Scloud Pte Ltd
163.43.18.248
8/10
Confidence
100%
Reports
23
ISP
SAKURA Internet...
137.220.224.53
8/10
Confidence
100%
Reports
16
ISP
CTG Server Limited
118.194.229.94
10/10
Confidence
100%
Reports
15
ISP
UCLOUD INFORMAT...
137.220.224.4
10/10
Confidence
100%
Reports
14
ISP
CTG Server Limited
217.142.231.0
8/10
Confidence
99%
Reports
20
ISP
Oracle Corporation
138.2.37.229
8/10
Confidence
99%
Reports
18
ISP
Oracle Corporation
20.89.17.172
10/10
Confidence
98%
Reports
400
ISP
MICROSOFT-CORP-...
74.176.59.137
10/10
Confidence
98%
Reports
219
ISP
MICROSOFT-CORP-...
52.147.68.81
10/10
Confidence
98%
Reports
190
ISP
MICROSOFT-CORP-...
20.222.16.238
10/10
Confidence
98%
Reports
111
ISP
MICROSOFT-CORP-...
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
78.142.18.172
8/10
Confidence
100%
Reports
580
Location
BG
BG
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
141.98.11.117
8/10
Confidence
100%
Reports
520
Location
LT
LT
208.109.188.137
8/10
Confidence
100%
Reports
514
Location
US
US
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
123.30.233.13
8/10
Confidence
100%
Reports
318
Location
VN
VN
103.76.120.219
8/10
Confidence
100%
Reports
310
Location
ID
ID
123.30.233.12
8/10
Confidence
100%
Reports
303
Location
VN
VN
116.118.2.113
8/10
Confidence
100%
Reports
296
Location
VN
VN
87.121.84.30
8/10
Confidence
100%
Reports
295
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203