Elevated Risk
Elevated threat level 8/10 for IP 20.214.147.109 from 18 reported incidents.
Behavioral profile indicates cyber threat activity with 62% confidence.
More threatening than 92% of monitored IPs
IP Address
20.214.147.109
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
South Korea
Location
Microsoft Corporation
ASN 8075
18
Reports
Mixed
Data Source
Threat Categories
WP Version Scanning
9
WP Plugin Scanning
9
WP Config Exposure
9
Brute-Force
7
WP Login Brute Force
7
Web App Attack
2
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
15. October 2026
Last Activity
24. October 2026
Recent (7 days)
3 incidents
Cloud Infrastructure
This IP operates from Microsoft Azure cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
62%
High Confidence
Confidence History
15. Oct 2026 - 24. Oct 2026
62%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Web App Attack | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 20.214.147.109
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS8075
- ISP
- Microsoft Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 15 Oct 2026
- Last Reported
- 24 Oct 2026, 02:06
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8075
Microsoft Corporation
NL
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
5,598
Total IPs Monitored
99,055
Total Reports
17.7
Reports per IP
Network Context
This IP address belongs to Microsoft Corporation (AS8075), which manages 5,598 IP addresses in our monitoring system. Out of these, 99,055 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,292,155 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
18
avg: 7
++
Network Comparison
Compared against 13,120 IPs in ASN 8075
Threat Level
8/10
network avg: 8.0
=
Total Reports
18
network avg: 12
+
Network Microsoft Corporation has overall threat level 8/10
Geographic Comparison
Compared against 5,291 IPs in KR
Threat Level
8/10
country avg: 7.2
=
Total Reports
18
country avg: 12
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
16 Oct 2026
4 reports
Daily Average
0.6
reports/day
Most Active
Friday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Plugin Scanning
9
WP Version Scanning
9
WP Config Exposure
9
WP Login Brute Force
7
Brute-Force
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,177,888 threat incidents tracked globally • Last 24h: 29,106 Logs
FEED
Top Threat Sources
-
01
Brazil258,628 22% -
02
United States199,721 17% -
03
India102,530 8.7% -
04
China49,636 4.2% -
05
Argentina41,949 3.6% -
06
SC29,412 2.5% -
07
Mexico27,446 2.3% -
08
Russia26,505 2.3% -
09
Colombia24,030 2% -
10
Germany22,844 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
52.168.141.47
10/10
Confidence
100%
Reports
42
Location
US
US
20.229.185.186
10/10
Confidence
100%
Reports
25
Location
NL
NL
172.160.227.37
10/10
Confidence
100%
Reports
22
Location
SE
SE
20.217.80.108
10/10
Confidence
99%
Reports
16
Location
IL
IL
20.89.68.9
10/10
Confidence
98%
Reports
24
Location
JP
JP
40.76.96.137
7/10
Confidence
98%
Reports
16
Location
US
US
20.5.85.204
10/10
Confidence
96%
Reports
37
Location
AU
AU
20.102.98.53
10/10
Confidence
96%
Reports
36
Location
US
US
23.97.182.38
10/10
Confidence
96%
Reports
35
Location
NL
NL
20.251.194.156
10/10
Confidence
96%
Reports
34
Location
NO
NO
20.244.17.248
10/10
Confidence
96%
Reports
32
Location
IN
IN
74.162.106.25
10/10
Confidence
96%
Reports
18
Location
AE
AE
20.105.65.67
10/10
Confidence
96%
Reports
16
Location
IE
IE
20.15.166.16
7/10
Confidence
96%
Reports
14
Location
US
US
40.124.186.184
8/10
Confidence
96%
Reports
14
Location
US
US
20.65.146.48
8/10
Confidence
96%
Reports
14
Location
US
US
40.124.117.59
8/10
Confidence
96%
Reports
14
Location
US
US
40.80.203.33
8/10
Confidence
96%
Reports
13
Location
US
US
51.124.186.154
10/10
Confidence
95%
Reports
18
Location
NL
NL
48.217.66.50
8/10
Confidence
95%
Reports
15
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.227.152.135
10/10
Confidence
100%
Reports
27
ISP
Cloudie Limited
211.220.197.170
10/10
Confidence
98%
Reports
26
ISP
Korea Telecom
112.161.75.207
10/10
Confidence
98%
Reports
15
ISP
Korea Telecom
121.134.185.211
10/10
Confidence
96%
Reports
37
ISP
Korea Telecom
119.192.128.163
10/10
Confidence
96%
Reports
37
ISP
Korea Telecom
175.209.156.146
10/10
Confidence
96%
Reports
36
ISP
Korea Telecom
14.53.202.223
10/10
Confidence
96%
Reports
36
ISP
Korea Telecom
121.133.167.123
10/10
Confidence
96%
Reports
32
ISP
Korea Telecom
211.239.113.21
10/10
Confidence
96%
Reports
30
ISP
Hostway IDC
106.244.120.37
10/10
Confidence
96%
Reports
30
ISP
LG DACOM Corpor...
140.238.9.14
10/10
Confidence
96%
Reports
28
ISP
Oracle Corporation
218.234.186.2
10/10
Confidence
96%
Reports
23
ISP
SK Broadband Co...
220.76.220.247
10/10
Confidence
96%
Reports
22
ISP
Korea Telecom
115.90.65.132
10/10
Confidence
96%
Reports
22
ISP
LG DACOM Corpor...
115.160.76.23
10/10
Confidence
96%
Reports
22
ISP
Seokyung Cable ...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
62%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
52.248.43.64
7/10
Confidence
62%
Reports
8
Location
US
US
85.89.218.189
6/10
Confidence
62%
Reports
9
Location
US
US
180.92.155.135
6/10
Confidence
62%
Reports
9
Location
US
US
202.81.211.229
6/10
Confidence
62%
Reports
11
Location
US
US
180.92.143.80
6/10
Confidence
62%
Reports
9
Location
US
US
103.105.155.27
8/10
Confidence
62%
Reports
40
Location
IN
IN
161.248.46.210
10/10
Confidence
62%
Reports
4
Location
IN
IN
41.235.190.104
10/10
Confidence
62%
Reports
5
Location
EG
EG
69.160.6.92
10/10
Confidence
62%
Reports
10
Location
MM
MM
103.240.76.112
8/10
Confidence
62%
Reports
8
Location
IN
IN
179.218.63.2
10/10
Confidence
62%
Reports
6
Location
BR
BR
8.216.3.28
10/10
Confidence
62%
Reports
20
Location
JP
JP
64.62.197.123
10/10
Confidence
62%
Reports
27
Location
US
US
185.90.101.64
10/10
Confidence
62%
Reports
90
Location
RU
RU
187.127.60.12
10/10
Confidence
62%
Reports
5
Location
BR
BR