Critical Alert
Security alert: 68.220.171.40 rated 10/10 based on 21 verified incidents.
Threat profile indicates sustained malicious activity with 99% confidence rating.
More threatening than 100% of monitored IPs
IP Address
68.220.171.40
IPv4
Public
US
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Top 5% Most Dangerous
US
Location
Microsoft Corporation
ASN 8075
21
Reports
Honeypot
Data Source
Threat Categories
SSH
19
Hacking
4
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
29. April 2026
Last Activity
21. May 2026
Recent (7 days)
7 incidents
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
99%
Verified
Confidence History
23. Apr 2026 - 21. May 2026
99%
Current
Stable
Trend
Security Reports (21)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 68.220.171.40
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS8075
- ISP
- Microsoft Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 21
- First Reported
- 23 Apr 2026
- Last Reported
- 21 May 2026, 16:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5,400
Total IPs Monitored
104,493
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,400 IP addresses in our monitoring system. Out of these, 104,493 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 154,349 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
21
avg: 28
-
Network Comparison
Compared against 5,565 IPs in ASN 8075
Threat Level
10/10
network avg: 7.5
+
Total Reports
21
network avg: 18
+
Network Microsoft Corporation has overall threat level 3/10
Geographic Comparison
Compared against 32,853 IPs in US
Threat Level
10/10
country avg: 5.5
++
Total Reports
21
country avg: 45
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 May 2026
6 reports
Daily Average
0.6
reports/day
Most Active
Wednesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
19
Hacking
4
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
145,767 threat incidents tracked globally • Last 24h: 18,538 Logs
FEED
Top Threat Sources
-
01
United States32,853 22.5%
-
02
China23,525 16.1% -
03
India15,871 10.9% -
04
Brazil7,074 4.9% -
05
Germany6,157 4.2%
-
06
Singapore5,769 4% -
07
Indonesia4,042 2.8% -
08
Netherlands3,769 2.6% -
09
Russia3,709 2.5% -
10
United Kingdom3,679 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
4.197.162.185
10/10
Confidence
100%
Reports
206
Location
AU
AU
4.190.210.95
10/10
Confidence
100%
Reports
197
Location
JP
JP
52.178.176.146
10/10
Confidence
100%
Reports
160
Location
IE
IE
52.169.148.186
10/10
Confidence
100%
Reports
155
Location
IE
IE
135.236.141.8
8/10
Confidence
100%
Reports
120
Location
IE
IE
52.232.35.131
8/10
Confidence
100%
Reports
106
Location
NL
NL
65.52.167.153
8/10
Confidence
100%
Reports
79
Location
HK
HK
4.225.39.110
10/10
Confidence
100%
Reports
53
Location
SE
SE
52.176.211.73
10/10
Confidence
100%
Reports
46
Location
US
US
20.116.34.103
10/10
Confidence
100%
Reports
40
Location
CA
CA
20.228.193.165
10/10
Confidence
100%
Reports
37
Location
US
US
20.24.137.18
8/10
Confidence
100%
Reports
20
Location
SG
SG
20.151.117.104
8/10
Confidence
100%
Reports
20
Location
CA
CA
135.235.138.43
10/10
Confidence
99%
Reports
108
Location
IN
IN
172.211.56.214
10/10
Confidence
99%
Reports
80
Location
NL
NL
20.203.59.187
10/10
Confidence
99%
Reports
45
Location
AE
AE
40.121.200.75
10/10
Confidence
99%
Reports
36
Location
US
US
52.232.19.79
10/10
Confidence
99%
Reports
23
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
208.109.188.137
8/10
Confidence
100%
Reports
470
ISP
GO-DADDY-COM-LLC
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
419
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
151
ISP
Netiface LLC
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
141.148.33.145
10/10
Confidence
100%
Reports
97
ISP
ORACLE-BMC-31898
162.240.108.214
8/10
Confidence
100%
Reports
84
ISP
Unified Layer
74.206.180.196
8/10
Confidence
100%
Reports
81
ISP
MOJOHOST
43.159.177.40
10/10
Confidence
100%
Reports
78
ISP
Tencent Buildin...
162.214.173.88
10/10
Confidence
100%
Reports
72
ISP
Unified Layer
152.32.148.250
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
8/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
130.12.181.102
8/10
Confidence
99%
Reports
1,225
Location
DE
DE
130.12.181.101
8/10
Confidence
99%
Reports
1,208
Location
DE
DE
130.12.181.97
8/10
Confidence
99%
Reports
1,204
Location
DE
DE
130.12.181.99
8/10
Confidence
99%
Reports
1,198
Location
DE
DE
130.12.181.106
8/10
Confidence
99%
Reports
1,197
Location
DE
DE
130.12.181.105
8/10
Confidence
99%
Reports
1,195
Location
DE
DE
130.12.181.107
8/10
Confidence
99%
Reports
1,193
Location
DE
DE
130.12.181.103
8/10
Confidence
99%
Reports
1,187
Location
DE
DE
130.12.181.109
8/10
Confidence
99%
Reports
1,162
Location
DE
DE
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP
87.121.84.81
8/10
Confidence
99%
Reports
152
Location
US
US