Notable Threat
IP 103.12.205.20 rated 8/10 from 83 verified reports.
Multiple security incidents attributed to this IP. Confidence: 100%.
More threatening than 91% of monitored IPs
IP Address
103.12.205.20
IPv4
Public
BD
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Bangladesh
Location
Pico Public Cloud Limited
ASN 153385
83
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
30
SSH
30
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
12. September 2026
Last Activity
17. September 2026
Recent (7 days)
54 incidents
Reputable Network
This IP is hosted on a network (ASN 153385) with generally good reputation. The ISP Pico Public Cloud Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
14. Sep 2026 - 17. Sep 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot x2 | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot x2 | 75% | |
| Brute-Force SSH | Honeypot x2 | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.12.205.20
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
BD
- ASN
- AS153385
- ISP
- Pico Public Cloud Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 83
- First Reported
- 12 Sep 2026
- Last Reported
- 17 Sep 2026, 21:31
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,202 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
83
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 153385
Threat Level
8/10
network avg: 8.0
=
Total Reports
83
network avg: 46
++
Geographic Comparison
Compared against 4,105 IPs in BD
Threat Level
8/10
country avg: 6.0
+
Total Reports
83
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Sep 2026
39 reports
Daily Average
2.8
reports/day
Most Active
Monday
39 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
83
Brute-Force
82
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
697,902 threat incidents tracked globally • Last 24h: 22,570 Logs
FEED
Top Threat Sources
-
01
United States134,790 19.3% -
02
Brazil109,415 15.7%
-
03
India75,775 10.9%
-
04
China43,100 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,467 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,801 2.3%
-
09
Pakistan15,195 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
8/10
Avg Threat
69%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
69%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.189.5.190
10/10
Confidence
100%
Reports
112
ISP
Red Data (Pvt.)...
203.190.11.3
8/10
Confidence
100%
Reports
77
ISP
Daffodil Online...
103.186.21.148
10/10
Confidence
100%
Reports
69
ISP
Red Data (Pvt.)...
103.183.62.3
10/10
Confidence
100%
Reports
54
ISP
Hasan Broadband...
103.183.62.2
10/10
Confidence
100%
Reports
42
ISP
Hasan Broadband...
103.239.14.19
10/10
Confidence
100%
Reports
35
ISP
CAFE-7040
103.16.72.118
10/10
Confidence
100%
Reports
31
ISP
BDCOM Online Li...
203.76.96.215
10/10
Confidence
100%
Reports
30
ISP
Link3 Technolog...
138.252.125.121
10/10
Confidence
100%
Reports
24
ISP
RS All in One O...
27.147.204.229
10/10
Confidence
100%
Reports
23
ISP
Link3 Technolog...
103.153.154.10
8/10
Confidence
100%
Reports
23
ISP
Pabna Cable Vis...
103.179.198.19
10/10
Confidence
100%
Reports
20
ISP
polash nagor do...
103.187.124.2
8/10
Confidence
100%
Reports
17
ISP
FNB Network
103.179.127.26
8/10
Confidence
100%
Reports
16
ISP
Winer Communica...
103.163.97.211
10/10
Confidence
100%
Reports
16
ISP
CPA
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.137
10/10
Confidence
100%
Reports
1,449
Location
BG
BG
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
213.177.179.195
10/10
Confidence
100%
Reports
701
Location
TW
TW
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
601
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
213.209.159.208
10/10
Confidence
100%
Reports
538
Location
DE
DE
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
45.148.10.204
8/10
Confidence
100%
Reports
509
Location
NL
NL
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
195.178.110.217
10/10
Confidence
100%
Reports
382
Location
BG
BG
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2