Elevated Risk
Elevated threat level 7/10 for IP 154.80.128.232 from 20 reported incidents.
Behavioral profile indicates cyber threat activity with 91% confidence.
More threatening than 88% of monitored IPs
IP Address
154.80.128.232
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Hong Kong
Location
Vpsvault.host Ltd
ASN 215925
20
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
20
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 days indicates persistent threat actor operations.
First Observed
9. November 2026
Last Activity
11. November 2026
Recent (7 days)
20 incidents
Reputable Network
This IP is hosted on a network (ASN 215925) with generally good reputation. The ISP Vpsvault.host Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
7/10
High
Confidence Score
91%
Verified
Confidence History
9. Nov 2026 - 11. Nov 2026
91%
Current
Stable
Trend
Security Reports (20)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 154.80.128.232
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
HK
- ASN
- AS215925
- ISP
- Vpsvault.host Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 20
- First Reported
- 9 Nov 2026
- Last Reported
- 11 Nov 2026, 06:27
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS215925
Vpsvault.host Ltd
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
119
Total IPs Monitored
27,203
Total Reports
228.6
Reports per IP
Network Context
This IP address belongs to Vpsvault.host Ltd (AS215925), which manages 119 IP addresses in our monitoring system. Out of these, 27,203 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,346,875 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
20
avg: 7
++
Network Comparison
Compared against 294 IPs in ASN 215925
Threat Level
7/10
network avg: 9.1
-
Total Reports
20
network avg: 164
--
Network Vpsvault.host Ltd has overall threat level 3/10
Geographic Comparison
Compared against 8,170 IPs in HK
Threat Level
7/10
country avg: 7.3
=
Total Reports
20
country avg: 21
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
10 Nov 2026
9 reports
Daily Average
0.7
reports/day
Most Active
Tuesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
20
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,227,857 threat incidents tracked globally • Last 24h: 21,327 Logs
FEED
Top Threat Sources
-
01
Brazil261,559 21.3% -
02
United States212,378 17.3%
-
03
India103,950 8.5% -
04
China52,208 4.3% -
05
Argentina42,548 3.5% -
06
SC29,476 2.4% -
07
Mexico28,088 2.3% -
08
Russia27,336 2.2% -
09
Germany25,466 2.1% -
10
Colombia24,330 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
154.80.128.170
7/10
Confidence
96%
Reports
43
Location
HK
HK
45.198.224.125
8/10
Confidence
94%
Reports
983
Location
US
US
45.198.224.51
10/10
Confidence
94%
Reports
199
Location
US
US
45.198.224.251
8/10
Confidence
94%
Reports
82
Location
US
US
45.198.224.20
10/10
Confidence
94%
Reports
79
Location
US
US
45.198.224.89
10/10
Confidence
94%
Reports
65
Location
US
US
154.80.128.121
10/10
Confidence
94%
Reports
47
Location
HK
HK
45.198.224.238
10/10
Confidence
94%
Reports
46
Location
US
US
154.80.128.124
10/10
Confidence
94%
Reports
45
Location
HK
HK
45.198.224.239
10/10
Confidence
94%
Reports
44
Location
US
US
45.198.224.230
10/10
Confidence
94%
Reports
42
Location
US
US
45.198.224.235
10/10
Confidence
94%
Reports
42
Location
US
US
45.198.224.234
10/10
Confidence
94%
Reports
41
Location
US
US
45.198.224.233
10/10
Confidence
94%
Reports
41
Location
US
US
45.198.224.231
10/10
Confidence
94%
Reports
40
Location
US
US
45.198.224.232
10/10
Confidence
94%
Reports
38
Location
US
US
45.198.224.236
10/10
Confidence
94%
Reports
38
Location
US
US
45.198.224.237
10/10
Confidence
94%
Reports
37
Location
US
US
154.80.128.199
10/10
Confidence
94%
Reports
22
Location
HK
HK
45.198.224.252
8/10
Confidence
91%
Reports
585
Location
US
US
IPs from the same subnet range, likely same network segment.
7
Related IPs
9/10
Avg Threat
77%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
154.80.128.170
7/10
Confidence
96%
Reports
43
Location
HK
HK
154.80.128.121
10/10
Confidence
94%
Reports
47
Location
HK
HK
154.80.128.124
10/10
Confidence
94%
Reports
45
Location
HK
HK
154.80.128.199
10/10
Confidence
94%
Reports
22
Location
HK
HK
154.80.128.231
8/10
Confidence
57%
Reports
6
Location
HK
HK
154.80.128.172
10/10
Confidence
52%
Reports
5
Location
HK
HK
154.80.128.173
8/10
Confidence
51%
Reports
4
Location
HK
HK
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.92.162.185
10/10
Confidence
98%
Reports
18
ISP
Google LLC
103.143.239.201
10/10
Confidence
97%
Reports
23
ISP
YISU CLOUD LTD
154.92.2.59
10/10
Confidence
96%
Reports
45
ISP
XCLOUD TECHNOLO...
94.190.229.193
10/10
Confidence
96%
Reports
45
ISP
HKT Limited
154.80.128.170
7/10
Confidence
96%
Reports
43
ISP
Vpsvault.host Ltd
49.213.6.30
10/10
Confidence
96%
Reports
43
ISP
Towngas Telecom...
141.193.153.146
10/10
Confidence
96%
Reports
37
ISP
Netsec Limited
216.118.231.170
10/10
Confidence
96%
Reports
34
ISP
Netsec Limited
52.128.227.50
10/10
Confidence
96%
Reports
34
ISP
Netsec Limited
148.66.49.226
10/10
Confidence
96%
Reports
34
ISP
Netsec Limited
45.115.26.149
7/10
Confidence
96%
Reports
22
ISP
SolidCore Hosti...
103.161.34.14
8/10
Confidence
96%
Reports
13
ISP
PIO-Hosting GmbH
34.92.228.207
8/10
Confidence
95%
Reports
11
ISP
Google LLC
5.187.38.30
10/10
Confidence
94%
Reports
409
ISP
Amarutu Technol...
45.39.247.24
10/10
Confidence
94%
Reports
65
ISP
2e Telekomunika...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.245.169.3
10/10
Confidence
91%
Reports
12
Location
US
US
35.247.252.15
10/10
Confidence
91%
Reports
11
Location
BR
BR
35.234.99.12
10/10
Confidence
91%
Reports
10
Location
DE
DE
35.197.189.7
10/10
Confidence
91%
Reports
11
Location
AU
AU
82.197.193.190
10/10
Confidence
91%
Reports
9
Location
BE
BE
185.132.187.101
10/10
Confidence
91%
Reports
11
Location
BE
BE
82.197.193.199
10/10
Confidence
91%
Reports
11
Location
BE
BE
82.197.193.98
10/10
Confidence
91%
Reports
11
Location
BE
BE
34.85.99.144
10/10
Confidence
91%
Reports
31
Location
JP
JP
50.6.5.117
10/10
Confidence
91%
Reports
13
Location
US
US
129.121.143.33
10/10
Confidence
91%
Reports
14
Location
US
US
129.121.142.84
10/10
Confidence
91%
Reports
16
Location
US
US
129.121.78.222
10/10
Confidence
91%
Reports
15
Location
US
US
211.72.115.235
10/10
Confidence
91%
Reports
18
Location
TW
TW
182.70.63.221
10/10
Confidence
91%
Reports
22
Location
IN
IN