Critical Alert
Security alert: 154.16.112.12 rated 10/10 based on 51 verified incidents.
Threat profile indicates sustained malicious activity with 60% confidence rating.
More threatening than 98% of monitored IPs
IP Address
154.16.112.12
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
United States
Location
WHG Hosting Services Ltd
ASN 14670
51
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
SSH
28
Brute-Force
1
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
13. September 2026
Last Activity
13. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 14670, operated by WHG Hosting Services Ltd) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
60%
High Confidence
Confidence History
9. Sep 2026 - 13. Sep 2026
60%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 154.16.112.12
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS14670
- ISP
- WHG Hosting Services Ltd
DNS Information
- Reverse DNS
- server1.mamoun.org
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 51
- First Reported
- 24 Aug 2026
- Last Reported
- 13 Sep 2026, 19:45
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14670
WHG Hosting Services Ltd
US
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10
Total IPs Monitored
25
Total Reports
2.5
Reports per IP
Network Context
This IP address belongs to WHG Hosting Services Ltd (AS14670), which manages 10 IP addresses in our monitoring system. Out of these, 25 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 852,292 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
51
avg: 9
++
Network Comparison
Compared against 53 IPs in ASN 14670
Threat Level
10/10
network avg: 8.2
+
Total Reports
51
network avg: 25
++
Network WHG Hosting Services Ltd has overall threat level 5/10
Geographic Comparison
Compared against 151,223 IPs in US
Threat Level
10/10
country avg: 6.8
+
Total Reports
51
country avg: 18
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
13 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Wednesday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
49
SSH
46
Exploited Host
3
Brute-Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
774,579 threat incidents tracked globally • Last 24h: 29,678 Logs
FEED
Top Threat Sources
-
01
United States151,240 19.5% -
02
Brazil113,013 14.6%
-
03
India90,223 11.6%
-
04
China46,700 6%
-
05
SC29,268 3.8%
-
06
Germany18,902 2.4%
-
07
Pakistan18,478 2.4%
-
08
Netherlands18,319 2.4%
-
09
Argentina16,742 2.2%
-
10
Indonesia15,394 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
36%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
191.101.241.242
10/10
Confidence
96%
Reports
56
Location
US
US
181.214.83.147
10/10
Confidence
59%
Reports
68
Location
US
US
179.61.137.164
10/10
Confidence
59%
Reports
63
Location
US
US
179.61.137.23
10/10
Confidence
56%
Reports
70
Location
US
US
154.16.115.34
10/10
Confidence
56%
Reports
11
Location
US
US
154.16.114.112
10/10
Confidence
53%
Reports
6
Location
US
US
154.16.115.33
10/10
Confidence
39%
Reports
4
Location
US
US
181.214.83.153
10/10
Confidence
32%
Reports
5
Location
US
US
154.16.119.69
10/10
Confidence
31%
Reports
5
Location
US
US
191.101.50.119
10/10
Confidence
24%
Reports
6
Location
US
US
65.181.111.155
8/10
Confidence
24%
Reports
4
Location
US
US
65.181.111.160
7/10
Confidence
24%
Reports
2
Location
US
US
154.16.115.37
10/10
Confidence
23%
Reports
3
Location
US
US
192.250.231.28
0/10
Confidence
23%
Reports
3
Location
GB
GB
65.181.118.179
4/10
Confidence
23%
Reports
1
Location
US
US
190.92.168.45
7/10
Confidence
22%
Reports
5
Location
US
US
190.92.171.214
6/10
Confidence
22%
Reports
1
Location
US
US
190.92.173.107
7/10
Confidence
19%
Reports
1
Location
US
US
179.61.232.244
10/10
Confidence
18%
Reports
114
Location
US
US
191.101.33.115
10/10
Confidence
17%
Reports
123
Location
US
US
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
1%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
60%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.42.116.21
8/10
Confidence
60%
Reports
43
Location
NL
NL
103.237.37.167
7/10
Confidence
60%
Reports
5
Location
BD
BD
43.228.157.169
10/10
Confidence
60%
Reports
21
Location
PK
PK
39.185.130.247
10/10
Confidence
60%
Reports
32
Location
CN
CN
194.187.176.163
10/10
Confidence
60%
Reports
59
Location
DE
DE
45.84.107.97
8/10
Confidence
60%
Reports
170
Location
SE
SE
91.239.157.187
10/10
Confidence
60%
Reports
17
Location
DE
DE
40.124.116.254
10/10
Confidence
60%
Reports
5
Location
US
US
20.65.169.190
8/10
Confidence
60%
Reports
7
Location
US
US
109.160.32.82
10/10
Confidence
60%
Reports
8
Location
BG
BG
45.154.244.160
10/10
Confidence
60%
Reports
8
Location
SC
SC
5.49.32.233
10/10
Confidence
60%
Reports
8
Location
FR
FR
157.230.103.116
10/10
Confidence
60%
Reports
8
Location
DE
DE
20.163.12.180
10/10
Confidence
60%
Reports
8
Location
US
US
149.102.230.138
8/10
Confidence
60%
Reports
203
Location
DE
DE