Critical Alert
Security alert: 130.195.221.163 rated 10/10 based on 33 verified incidents.
Threat profile indicates sustained malicious activity with 0% confidence rating.
More threatening than 90% of monitored IPs
IP Address
130.195.221.163
IPv4
Public
FI
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
FI
Location
M247 Europe SRL
ASN 9009
33
Reports
Honeypot
Data Source
Threat Categories
WP Login Brute Force
30
WP Admin Brute Force
30
Reputable Network
This IP is hosted on a network (ASN 9009) with generally good reputation. The ISP M247 Europe SRL maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
11. Jan 2026 - 26. Jan 2026
0%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 130.195.221.163
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
FI
- ASN
- AS9009
- ISP
- M247 Europe SRL
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 33
- First Reported
- 26 Nov 2025
- Last Reported
- 26 Jan 2026, 19:00
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9009
M247 Europe SRL
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
581
Total IPs Monitored
7,869
Total Reports
13.5
Reports per IP
Network Context
This IP address belongs to M247 Europe SRL (AS9009), which manages 581 IP addresses in our monitoring system. Out of these, 7,869 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 810,239 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
33
avg: 9
++
Network Comparison
Compared against 1,860 IPs in ASN 9009
Threat Level
10/10
network avg: 7.0
+
Total Reports
33
network avg: 8
++
Network M247 Europe SRL has overall threat level 3/10
Geographic Comparison
Compared against 2,064 IPs in FI
Threat Level
10/10
country avg: 6.7
+
Total Reports
33
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
33
WP Admin Brute Force
33
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
736,708 threat incidents tracked globally • Last 24h: 32,059 Logs
FEED
Top Threat Sources
-
01
United States143,981 19.5% -
02
Brazil110,879 15.1%
-
03
India82,821 11.2%
-
04
China44,936 6.1%
-
05
SC29,241 4%
-
06
Germany17,636 2.4%
-
07
Netherlands17,549 2.4%
-
08
Pakistan16,801 2.3%
-
09
Argentina16,197 2.2%
-
10
Colombia15,142 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
81%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
81.181.106.69
8/10
Confidence
93%
Reports
256
Location
US
US
38.132.122.177
8/10
Confidence
92%
Reports
11
Location
US
US
146.70.197.226
7/10
Confidence
91%
Reports
25
Location
DK
DK
82.102.18.188
8/10
Confidence
89%
Reports
95
Location
FR
FR
62.133.46.14
10/10
Confidence
87%
Reports
43
Location
IR
IR
79.110.54.94
10/10
Confidence
87%
Reports
40
Location
US
US
130.195.221.245
10/10
Confidence
87%
Reports
12
Location
FI
FI
45.92.33.82
7/10
Confidence
86%
Reports
11
Location
GR
GR
62.133.46.5
10/10
Confidence
85%
Reports
41
Location
IR
IR
146.70.231.130
8/10
Confidence
80%
Reports
8
Location
RU
RU
62.133.46.20
10/10
Confidence
78%
Reports
32
Location
IR
IR
85.121.52.146
10/10
Confidence
77%
Reports
525
Location
DE
DE
146.70.194.252
8/10
Confidence
76%
Reports
83
Location
FR
FR
146.70.194.238
8/10
Confidence
75%
Reports
380
Location
FR
FR
82.102.18.118
8/10
Confidence
75%
Reports
281
Location
FR
FR
95.181.232.51
10/10
Confidence
73%
Reports
33
Location
MA
MA
146.70.160.254
10/10
Confidence
73%
Reports
10
Location
DE
DE
146.70.52.54
8/10
Confidence
73%
Reports
6
Location
RU
RU
146.70.194.246
8/10
Confidence
71%
Reports
85
Location
FR
FR
146.70.36.132
8/10
Confidence
70%
Reports
11
Location
DE
DE
IPs from the same subnet range, likely same network segment.
8
Related IPs
8.1/10
Avg Threat
15%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
130.195.221.245
10/10
Confidence
87%
Reports
12
Location
FI
FI
130.195.221.246
10/10
Confidence
33%
Reports
4
Location
FI
FI
130.195.221.164
10/10
Confidence
0%
Reports
3
Location
FI
FI
130.195.221.174
7/10
Confidence
0%
Reports
2
Location
FI
FI
130.195.221.171
7/10
Confidence
0%
Reports
1
Location
FI
FI
130.195.221.172
7/10
Confidence
0%
Reports
1
Location
FI
FI
130.195.221.170
7/10
Confidence
0%
Reports
1
Location
FI
FI
130.195.221.168
7/10
Confidence
0%
Reports
1
Location
FI
FI
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
86.38.182.193
10/10
Confidence
96%
Reports
169
ISP
Verda Cloud Oy
65.108.194.8
10/10
Confidence
96%
Reports
14
ISP
Hetzner Online ...
31.22.104.117
10/10
Confidence
94%
Reports
138
ISP
Verda Cloud Oy
86.38.182.65
10/10
Confidence
94%
Reports
35
ISP
Verda Cloud Oy
86.38.182.86
10/10
Confidence
94%
Reports
21
ISP
Verda Cloud Oy
104.28.222.16
8/10
Confidence
94%
Reports
14
ISP
Cloudflare, Inc.
130.195.221.245
10/10
Confidence
87%
Reports
12
ISP
M247 Europe SRL
104.28.254.16
8/10
Confidence
86%
Reports
15
ISP
Cloudflare, Inc.
95.133.254.30
10/10
Confidence
85%
Reports
11
ISP
Verda Cloud Oy
37.27.134.178
10/10
Confidence
81%
Reports
58
ISP
Hetzner Online ...
80.66.66.211
8/10
Confidence
80%
Reports
144
ISP
Soldatov Alexey...
95.217.220.120
10/10
Confidence
79%
Reports
43
ISP
Hetzner Online ...
65.21.239.164
8/10
Confidence
79%
Reports
7
ISP
Hetzner Online ...
2a01:4f9:6b:291e::2
8/10
Confidence
74%
Reports
11
ISP
Hetzner Online ...
157.180.75.206
10/10
Confidence
74%
Reports
9
ISP
Hetzner Online ...