Substantial Risk
Threat level 8/10 for 62.60.130.232 based on 35 documented incidents.
Consistent suspicious behavior patterns. 94% confidence rating.
More threatening than 84% of monitored IPs
IP Address
62.60.130.232
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Iran
Location
Cipher Operations Doo Beo...
ASN 215930
35
Reports
Mixed
Data Source
Threat Categories
WP Login Brute Force
15
Brute-Force
9
WP Version Scanning
4
WP Plugin Scanning
4
WP Config Exposure
4
WP User Enumeration
3
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
28. June 2026
Last Activity
25. July 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 215930) with generally good reputation. The ISP Cipher Operations Doo Beograd - Novi Beograd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
93%
Verified
Confidence History
12. Jun 2026 - 25. Jul 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community x2 | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 62.60.130.232
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IR
- ASN
- AS215930
- ISP
- Cipher Operations Doo Beograd - Novi Beograd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 35
- First Reported
- 9 Jun 2026
- Last Reported
- 25 Jul 2026, 17:47
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS215930
Cipher Operations Doo Beograd - Novi Beograd
IR
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
15
Total IPs Monitored
1,472
Total Reports
98.1
Reports per IP
Network Context
This IP address belongs to Cipher Operations Doo Beograd - Novi Beograd (AS215930), which manages 15 IP addresses in our monitoring system. Out of these, 1,472 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 293,073 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
35
avg: 18
++
Network Comparison
Compared against 27 IPs in ASN 215930
Threat Level
8/10
network avg: 7.1
=
Total Reports
35
network avg: 160
--
Network Cipher Operations Doo Beograd - Novi Beograd has overall threat level 3/10
Geographic Comparison
Compared against 966 IPs in IR
Threat Level
8/10
country avg: 7.3
=
Total Reports
35
country avg: 38
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Jun 2026
9 reports
Daily Average
0.9
reports/day
Most Active
Monday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
15
WP Plugin Scanning
9
WP Version Scanning
9
WP Config Exposure
9
Brute-Force
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
274,928 threat incidents tracked globally • Last 24h: 15,372 Logs
FEED
Top Threat Sources
-
01
United States61,853 22.5% -
02
India45,519 16.6% -
03
China34,160 12.4% -
04
Brazil14,712 5.4% -
05
Germany9,871 3.6% -
06
Singapore7,961 2.9% -
07
Indonesia7,888 2.9% -
08
Pakistan7,808 2.8% -
09
Russia6,184 2.2% -
10
Netherlands5,930 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.8/10
Avg Threat
88%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
62.60.130.233
8/10
Confidence
100%
Reports
299
Location
IR
IR
62.60.130.230
8/10
Confidence
100%
Reports
160
Location
IR
IR
62.60.130.182
8/10
Confidence
100%
Reports
88
Location
IR
IR
62.60.130.231
8/10
Confidence
100%
Reports
40
Location
IR
IR
62.60.130.235
8/10
Confidence
98%
Reports
120
Location
IR
IR
62.60.130.224
8/10
Confidence
97%
Reports
83
Location
IR
IR
62.60.130.128
10/10
Confidence
96%
Reports
50
Location
IR
IR
62.60.130.238
7/10
Confidence
95%
Reports
44
Location
IR
IR
62.60.130.234
7/10
Confidence
94%
Reports
17
Location
IR
IR
62.60.130.237
7/10
Confidence
93%
Reports
20
Location
IR
IR
62.60.130.239
8/10
Confidence
89%
Reports
69
Location
IR
IR
62.60.130.223
8/10
Confidence
88%
Reports
63
Location
IR
IR
62.60.130.169
7/10
Confidence
87%
Reports
1,523
Location
IR
IR
62.60.130.142
8/10
Confidence
83%
Reports
10
Location
IR
IR
62.60.130.210
10/10
Confidence
82%
Reports
442
Location
IR
IR
62.60.130.228
8/10
Confidence
80%
Reports
403
Location
IR
IR
62.60.130.227
8/10
Confidence
80%
Reports
125
Location
IR
IR
62.60.130.65
7/10
Confidence
68%
Reports
346
Location
IR
IR
62.60.130.72
5/10
Confidence
67%
Reports
199
Location
IR
IR
62.60.130.213
8/10
Confidence
67%
Reports
145
Location
IR
IR
IPs from the same subnet range, likely same network segment.
20
Related IPs
7.8/10
Avg Threat
88%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
62.60.130.233
8/10
Confidence
100%
Reports
299
Location
IR
IR
62.60.130.230
8/10
Confidence
100%
Reports
160
Location
IR
IR
62.60.130.182
8/10
Confidence
100%
Reports
88
Location
IR
IR
62.60.130.231
8/10
Confidence
100%
Reports
40
Location
IR
IR
62.60.130.235
8/10
Confidence
98%
Reports
120
Location
IR
IR
62.60.130.224
8/10
Confidence
97%
Reports
83
Location
IR
IR
62.60.130.128
10/10
Confidence
96%
Reports
50
Location
IR
IR
62.60.130.238
7/10
Confidence
95%
Reports
44
Location
IR
IR
62.60.130.234
7/10
Confidence
94%
Reports
17
Location
IR
IR
62.60.130.237
7/10
Confidence
93%
Reports
20
Location
IR
IR
62.60.130.239
8/10
Confidence
89%
Reports
69
Location
IR
IR
62.60.130.223
8/10
Confidence
88%
Reports
63
Location
IR
IR
62.60.130.169
7/10
Confidence
87%
Reports
1,523
Location
IR
IR
62.60.130.142
8/10
Confidence
83%
Reports
10
Location
IR
IR
62.60.130.210
10/10
Confidence
82%
Reports
442
Location
IR
IR
62.60.130.228
8/10
Confidence
80%
Reports
403
Location
IR
IR
62.60.130.227
8/10
Confidence
80%
Reports
125
Location
IR
IR
62.60.130.65
7/10
Confidence
68%
Reports
346
Location
IR
IR
62.60.130.72
5/10
Confidence
67%
Reports
199
Location
IR
IR
62.60.130.213
8/10
Confidence
67%
Reports
145
Location
IR
IR
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
62.60.130.233
8/10
Confidence
100%
Reports
299
ISP
Cipher Operatio...
62.60.130.230
8/10
Confidence
100%
Reports
160
ISP
Cipher Operatio...
62.60.130.182
8/10
Confidence
100%
Reports
88
ISP
Cipher Operatio...
185.109.244.91
10/10
Confidence
100%
Reports
79
ISP
Asiatech Data T...
217.60.241.103
8/10
Confidence
100%
Reports
66
ISP
Pfcloud UG (haf...
62.60.130.231
8/10
Confidence
100%
Reports
40
ISP
Cipher Operatio...
185.93.89.167
8/10
Confidence
100%
Reports
35
ISP
Limited Network...
62.60.131.175
10/10
Confidence
100%
Reports
26
ISP
Feo Prest SRL
62.60.131.165
10/10
Confidence
100%
Reports
24
ISP
Feo Prest SRL
62.60.131.177
8/10
Confidence
100%
Reports
21
ISP
Feo Prest SRL
62.60.131.159
10/10
Confidence
100%
Reports
20
ISP
Feo Prest SRL
62.60.131.169
8/10
Confidence
100%
Reports
20
ISP
Feo Prest SRL
62.60.131.232
10/10
Confidence
100%
Reports
20
ISP
Feo Prest SRL
212.80.9.235
8/10
Confidence
100%
Reports
19
ISP
Giti Secure Clo...
79.127.127.39
8/10
Confidence
100%
Reports
16
ISP
Asiatech Data T...
IPs with similar threat level and confidence scores.
15
Related IPs
9.9/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
51.68.207.118
10/10
Confidence
94%
Reports
9,847
Location
FR
FR
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
45.198.224.18
10/10
Confidence
94%
Reports
3,562
Location
US
US
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
176.65.148.84
10/10
Confidence
94%
Reports
3,465
Location
NL
NL
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
5.187.35.142
8/10
Confidence
94%
Reports
3,018
Location
NL
NL
177.125.137.18
10/10
Confidence
94%
Reports
2,963
Location
MX
MX
45.205.1.110
10/10
Confidence
94%
Reports
2,318
Location
US
US
87.251.64.159
10/10
Confidence
94%
Reports
2,236
Location
US
US
4.145.113.4
10/10
Confidence
94%
Reports
1,642
Location
SG
SG
14.98.67.210
10/10
Confidence
94%
Reports
1,615
Location
IN
IN
160.119.71.136
10/10
Confidence
94%
Reports
1,604
Location
SC
SC
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.172
- 66.132.172.167
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13