Report for IP: 20.169.74.48

Threat LevelCRITICAL72/1002 rule types across 2 attack categories
2 incidents on record · 2 rule types · active attack detected · persistent 26-day campaign · last seen 56d ago
PTR N/A
Org / ASN Microsoft Azure Cloud (westus3)
Country 🇺🇸 United States
City Phoenix, Arizona
Timezone America/Phoenix

Attack Analysis

WordPress: Cleartext Login Attempt
This IP attempted to log into WordPress over unencrypted HTTP instead of HTTPS. This exposes credentials in transit and is a sign of automated attack tools that ignore TLS. Modern browsers and legitimate users always use HTTPS for authentication.
Suricata IDS Alert
Suricata intrusion detection flagged this IP for malicious network behaviour — including port scanning, exploit attempts, botnet activity, or known attack signatures. The specific signature is shown in the report list below.

Reports (2)

Date Severity Description
4 Aug 2026 - 18:10 high IDS: Suricata alert
9 Jul 2026 - 22:57 high WordPress: Cleartext login attempt over HTTP