Elevated Risk
Elevated threat level 8/10 for IP 20.226.60.108 from 18 reported incidents.
Behavioral profile indicates cyber threat activity with 99% confidence.
More threatening than 79% of monitored IPs
IP Address
20.226.60.108
IPv4
Public
BR
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Above Average Risk
Brazil
Location
Microsoft Corporation
ASN 8075
18
Reports
Mixed
Data Source
Threat Categories
WP Login Brute Force
16
WP Admin Brute Force
3
Hacking
2
Brute-Force
2
WP Version Scanning
1
WP Plugin Scanning
1
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
19. May 2026
Last Activity
25. May 2026
Recent (7 days)
18 incidents
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
99%
Verified
Confidence History
19. May 2026 - 25. May 2026
99%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force Hacking Brute-Force | Honeypot x2 | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 20.226.60.108
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
BR
- ASN
- AS8075
- ISP
- Microsoft Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 19 May 2026
- Last Reported
- 25 May 2026, 22:45
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5,400
Total IPs Monitored
104,493
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,400 IP addresses in our monitoring system. Out of these, 104,493 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 155,373 reported IPs worldwide
Threat Level
8/10
avg: 4.8
++
Total Reports
18
avg: 28
-
Network Comparison
Compared against 5,573 IPs in ASN 8075
Threat Level
8/10
network avg: 7.5
=
Total Reports
18
network avg: 18
=
Network Microsoft Corporation has overall threat level 3/10
Geographic Comparison
Compared against 7,182 IPs in BR
Threat Level
8/10
country avg: 5.1
++
Total Reports
18
country avg: 19
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 May 2026
7 reports
Daily Average
0.6
reports/day
Most Active
Wednesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
16
WP Admin Brute Force
3
Hacking
2
Brute-Force
2
WP Plugin Scanning
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
146,605 threat incidents tracked globally • Last 24h: 19,997 Logs
FEED
Top Threat Sources
-
01
United States33,005 22.5% -
02
China23,615 16.1% -
03
India15,961 10.9% -
04
Brazil7,182 4.9%
-
05
Germany6,201 4.2%
-
06
Singapore5,779 3.9% -
07
Indonesia4,054 2.8% -
08
Netherlands3,799 2.6% -
09
Russia3,724 2.5% -
10
United Kingdom3,715 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
135.236.141.8
8/10
Confidence
100%
Reports
120
Location
IE
IE
52.232.35.131
8/10
Confidence
100%
Reports
106
Location
NL
NL
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
52.176.211.73
10/10
Confidence
100%
Reports
47
Location
US
US
20.116.34.103
10/10
Confidence
100%
Reports
41
Location
CA
CA
20.228.193.165
10/10
Confidence
100%
Reports
37
Location
US
US
20.24.137.18
8/10
Confidence
100%
Reports
20
Location
SG
SG
20.151.117.104
8/10
Confidence
100%
Reports
20
Location
CA
CA
4.206.92.183
10/10
Confidence
100%
Reports
15
Location
CA
CA
135.235.138.43
10/10
Confidence
99%
Reports
108
Location
IN
IN
172.211.56.214
10/10
Confidence
99%
Reports
80
Location
NL
NL
40.121.200.75
10/10
Confidence
99%
Reports
37
Location
US
US
52.232.19.79
10/10
Confidence
99%
Reports
23
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
129.121.41.228
8/10
Confidence
100%
Reports
79
ISP
Oracle Corporation
177.54.150.128
8/10
Confidence
100%
Reports
39
ISP
Latitude.sh LTDA
45.168.49.126
8/10
Confidence
100%
Reports
17
ISP
OK NET INFOR LTDA
179.127.10.197
8/10
Confidence
99%
Reports
84
ISP
Under Servicos ...
152.250.243.47
10/10
Confidence
99%
Reports
63
ISP
TELEFONICA BRAS...
177.141.9.161
8/10
Confidence
99%
Reports
20
ISP
Claro NXT Telec...
45.169.128.70
10/10
Confidence
98%
Reports
74
ISP
THM Tecnologia ...
131.161.219.137
8/10
Confidence
98%
Reports
63
ISP
NetBrasil Telec...
209.14.88.118
10/10
Confidence
98%
Reports
35
ISP
X99 INTERNET
186.219.184.142
10/10
Confidence
98%
Reports
30
ISP
Tudo Internet
201.77.124.248
10/10
Confidence
98%
Reports
29
ISP
Desktop Sigmane...
45.168.89.150
8/10
Confidence
98%
Reports
16
ISP
LEXCOM TELECOM
187.33.251.218
10/10
Confidence
98%
Reports
15
ISP
TELY Ltda.
177.54.62.68
10/10
Confidence
98%
Reports
15
ISP
ENGEPLUS INFORM...
43.157.151.226
10/10
Confidence
97%
Reports
98
ISP
Tencent Buildin...
IPs with similar threat level and confidence scores.
15
Related IPs
8.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
130.12.181.102
8/10
Confidence
99%
Reports
1,225
Location
DE
DE
130.12.181.101
8/10
Confidence
99%
Reports
1,208
Location
DE
DE
130.12.181.97
8/10
Confidence
99%
Reports
1,204
Location
DE
DE
130.12.181.99
8/10
Confidence
99%
Reports
1,198
Location
DE
DE
130.12.181.106
8/10
Confidence
99%
Reports
1,197
Location
DE
DE
130.12.181.105
8/10
Confidence
99%
Reports
1,195
Location
DE
DE
130.12.181.107
8/10
Confidence
99%
Reports
1,193
Location
DE
DE
130.12.181.103
8/10
Confidence
99%
Reports
1,187
Location
DE
DE
130.12.181.109
8/10
Confidence
99%
Reports
1,162
Location
DE
DE
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
183.62.127.90
10/10
Confidence
99%
Reports
172
Location
CN
CN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP