Significant Threat
IP 92.60.189.21 identified as significant threat (8/10) from 35 events.
Multiple malicious indicators detected. Confidence level: 95%.
More threatening than 78% of monitored IPs
IP Address
92.60.189.21
IPv4
Public
UA
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Above Average Risk
UA
Location
WNET TELECOM USA Corp.
ASN 1820
35
Reports
Mixed
Data Source
Threat Categories
Brute-Force
20
WP Login Brute Force
10
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
29. April 2026
Last Activity
25. May 2026
Recent (7 days)
18 incidents
High-Risk Network Association
This IP belongs to a network (ASN 1820) with elevated threat levels. The ISP WNET TELECOM USA Corp. hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
95%
Verified
Confidence History
6. May 2026 - 25. May 2026
95%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force | Community | 75% |
| New | Brute-Force | Community | 75% |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 92.60.189.21
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
UA
- ASN
- AS1820
- ISP
- WNET TELECOM USA Corp.
DNS Information
- Reverse DNS
- AtbMarket-gw.l9-sw4.kv.wnet.ua
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 35
- First Reported
- 20 Apr 2026
- Last Reported
- 25 May 2026, 06:04
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS1820
WNET TELECOM USA Corp.
UA
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
2
Total Reports
2
Reports per IP
Network Context
This IP address belongs to WNET TELECOM USA Corp. (AS1820), which manages 1 IP addresses in our monitoring system. Out of these, 2 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
⚠️ Network Warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 153,926 reported IPs worldwide
Threat Level
8/10
avg: 4.8
++
Total Reports
35
avg: 28
+
Geographic Comparison
Compared against 591 IPs in UA
Threat Level
8/10
country avg: 5.2
++
Total Reports
35
country avg: 152
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
21 May 2026
4 reports
Daily Average
1.1
reports/day
Most Active
Wednesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
20
WP Login Brute Force
15
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
145,363 threat incidents tracked globally • Last 24h: 18,947 Logs
FEED
Top Threat Sources
-
01
United States32,793 22.6% -
02
China23,511 16.2% -
03
India15,734 10.8% -
04
Brazil7,030 4.8% -
05
Germany6,143 4.2% -
06
Singapore5,764 4% -
07
Indonesia4,031 2.8% -
08
Netherlands3,758 2.6% -
09
Russia3,704 2.5% -
10
United Kingdom3,678 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.88.138.44
10/10
Confidence
100%
Reports
172
ISP
Ayosoft Ltd
109.95.33.211
10/10
Confidence
100%
Reports
114
ISP
ISP Shtorm LTD
92.113.142.203
10/10
Confidence
97%
Reports
19
ISP
IDC Cube
77.83.39.197
10/10
Confidence
96%
Reports
59
ISP
Kprohost LLC
77.83.39.9
10/10
Confidence
96%
Reports
17
ISP
Kprohost LLC
195.49.128.211
8/10
Confidence
95%
Reports
31
ISP
SPD Polyudov Al...
92.63.197.22
10/10
Confidence
94%
Reports
941
ISP
FOP Dmytro Nedi...
185.156.73.157
10/10
Confidence
94%
Reports
482
ISP
FOP Dmytro Nedi...
77.87.40.114
10/10
Confidence
94%
Reports
104
ISP
Zubko Volodymyr...
185.243.96.20
10/10
Confidence
94%
Reports
103
ISP
Rices Privately...
46.149.191.249
10/10
Confidence
94%
Reports
97
ISP
Kaluska informa...
88.210.63.126
10/10
Confidence
94%
Reports
72
ISP
FOP Dmytro Nedi...
77.83.39.94
10/10
Confidence
94%
Reports
50
ISP
Kprohost LLC
185.177.188.88
10/10
Confidence
94%
Reports
50
ISP
X-City Ltd.
195.211.191.112
10/10
Confidence
94%
Reports
46
ISP
Hbing Limited
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
167.94.146.50
8/10
Confidence
95%
Reports
425
Location
US
US
167.94.146.54
8/10
Confidence
95%
Reports
403
Location
US
US
167.94.146.58
10/10
Confidence
95%
Reports
369
Location
US
US
185.242.226.81
10/10
Confidence
95%
Reports
316
Location
US
US
207.90.244.6
10/10
Confidence
95%
Reports
286
Location
US
US
102.88.137.213
10/10
Confidence
95%
Reports
247
Location
NG
NG
185.242.226.85
10/10
Confidence
95%
Reports
203
Location
US
US
20.220.148.239
10/10
Confidence
95%
Reports
190
Location
CA
CA
148.153.56.170
10/10
Confidence
95%
Reports
164
Location
US
US
86.54.31.32
8/10
Confidence
95%
Reports
151
Location
CA
CA
91.196.152.39
10/10
Confidence
95%
Reports
151
Location
FR
FR
195.184.76.204
10/10
Confidence
95%
Reports
148
Location
US
US
54.38.52.18
10/10
Confidence
95%
Reports
142
Location
PL
PL
91.230.168.0
10/10
Confidence
95%
Reports
141
Location
US
US
195.184.76.165
10/10
Confidence
95%
Reports
137
Location
US
US