Significant Threat
IP 159.65.18.197 identified as significant threat (8/10) from 18 events.
Multiple malicious indicators detected. Confidence level: 89%.
More threatening than 90% of monitored IPs
IP Address
159.65.18.197
IPv4
Public
GB
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
United Kingdom
Location
DigitalOcean, LLC
ASN 14061
18
Reports
Mixed
Data Source
Threat Categories
Web App Attack
9
WP Config Exposure
9
Hacking
8
WP Plugin Exploit
8
WP User Enumeration
8
Brute-Force
7
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
29. September 2026
Last Activity
12. October 2026
Recent (7 days)
2 incidents
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
89%
Verified
Confidence History
8. May 2026 - 12. Oct 2026
89%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Port Scan Hacking Web App Attack +7 | Honeypot x6 | 75% |
| Port Scan Hacking Web App Attack +6 | Honeypot x5 | 75% | |
| Hacking | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Port Scan Hacking Web App Attack +7 | Honeypot x6 | 75% | |
| Port Scan Hacking Web App Attack +7 | Honeypot x8 | 75% | |
| WP Config Exposure Brute-Force WP Login Brute Force +3 | Honeypot x10 | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Config Exposure Brute-Force WP Login Brute Force +3 | Honeypot x7 | 75% | |
| Hacking | Community | 75% | |
| WP Config Exposure Brute-Force WP Login Brute Force +3 | Honeypot x5 | 75% | |
| WP Config Exposure Brute-Force WP Login Brute Force +3 | Honeypot x7 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 159.65.18.197
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
GB
- ASN
- AS14061
- ISP
- DigitalOcean, LLC
DNS Information
- Reverse DNS
- a6efafe308.scan.leakix.org
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 8 May 2026
- Last Reported
- 12 Oct 2026, 22:35
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 857,194 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
18
avg: 9
++
Network Comparison
Compared against 25,376 IPs in ASN 14061
Threat Level
8/10
network avg: 7.5
=
Total Reports
18
network avg: 25
-
Network DigitalOcean, LLC has overall threat level 4/10
Geographic Comparison
Compared against 11,214 IPs in GB
Threat Level
8/10
country avg: 7.1
=
Total Reports
18
country avg: 17
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Sep 2026
4 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Config Exposure
9
Web App Attack
9
Hacking
8
WP Plugin Exploit
8
WP User Enumeration
8
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
779,012 threat incidents tracked globally • Last 24h: 36,782 Logs
FEED
Top Threat Sources
-
01
United States152,155 19.5% -
02
Brazil113,301 14.5%
-
03
India91,100 11.7%
-
04
China46,934 6%
-
05
SC29,273 3.8%
-
06
Germany19,038 2.4%
-
07
Pakistan18,673 2.4%
-
08
Netherlands18,420 2.4%
-
09
Argentina16,789 2.2%
-
10
Indonesia15,503 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
139.59.83.112
10/10
Confidence
100%
Reports
43
Location
IN
IN
188.166.159.7
10/10
Confidence
100%
Reports
32
Location
GB
GB
157.230.59.111
10/10
Confidence
100%
Reports
22
Location
US
US
167.71.81.88
8/10
Confidence
100%
Reports
21
Location
US
US
157.230.218.106
10/10
Confidence
100%
Reports
18
Location
US
US
64.225.30.2
10/10
Confidence
100%
Reports
18
Location
US
US
146.190.74.52
10/10
Confidence
100%
Reports
12
Location
US
US
207.154.212.47
8/10
Confidence
99%
Reports
14
Location
DE
DE
134.209.147.251
8/10
Confidence
98%
Reports
91
Location
IN
IN
164.92.211.98
8/10
Confidence
98%
Reports
66
Location
NL
NL
167.99.207.12
10/10
Confidence
98%
Reports
18
Location
GB
GB
174.138.12.72
10/10
Confidence
98%
Reports
17
Location
NL
NL
143.110.217.244
8/10
Confidence
98%
Reports
15
Location
CA
CA
46.101.137.209
10/10
Confidence
97%
Reports
15
Location
DE
DE
159.223.33.235
8/10
Confidence
97%
Reports
14
Location
SG
SG
24.144.97.42
10/10
Confidence
96%
Reports
72
Location
US
US
167.71.106.67
10/10
Confidence
96%
Reports
58
Location
US
US
159.203.46.22
10/10
Confidence
96%
Reports
58
Location
CA
CA
159.223.229.138
10/10
Confidence
96%
Reports
53
Location
NL
NL
IPs from the same subnet range, likely same network segment.
3
Related IPs
6.7/10
Avg Threat
9%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.224.92.74
8/10
Confidence
100%
Reports
103
ISP
UAB Host Baltic
20.77.26.9
10/10
Confidence
100%
Reports
33
ISP
Microsoft Corpo...
188.166.159.7
10/10
Confidence
100%
Reports
32
ISP
DigitalOcean, LLC
138.226.239.233
10/10
Confidence
98%
Reports
71
ISP
HomeLine Broadb...
138.226.239.234
10/10
Confidence
98%
Reports
57
ISP
HomeLine Broadb...
191.96.110.97
10/10
Confidence
98%
Reports
24
ISP
UK Dedicated Se...
167.99.207.12
10/10
Confidence
98%
Reports
18
ISP
DigitalOcean, LLC
35.234.136.205
10/10
Confidence
97%
Reports
14
ISP
Google LLC
217.67.60.57
10/10
Confidence
96%
Reports
48
ISP
Wavenet Limited
81.107.250.21
8/10
Confidence
96%
Reports
42
ISP
Virgin Media
138.226.239.79
8/10
Confidence
96%
Reports
25
ISP
Digital Network...
193.32.209.242
8/10
Confidence
96%
Reports
25
ISP
Hydra Communica...
193.32.209.244
8/10
Confidence
96%
Reports
25
ISP
Hydra Communica...
5.253.38.204
8/10
Confidence
96%
Reports
20
ISP
CNServer LLC
188.240.59.48
8/10
Confidence
96%
Reports
16
ISP
Hydra Communica...
IPs with similar threat level and confidence scores.
15
Related IPs
7.1/10
Avg Threat
89%
Avg Confidence
4
High Threat
Elevated risk: Multiple related IPs are flagged
89.21.67.177
10/10
Confidence
89%
Reports
12
Location
NL
NL
188.240.59.12
10/10
Confidence
89%
Reports
12
Location
GB
GB
107.150.97.4
10/10
Confidence
89%
Reports
21
Location
US
US
141.95.54.130
10/10
Confidence
89%
Reports
32
Location
FR
FR
34.29.26.240
6/10
Confidence
89%
Reports
143
Location
US
US
34.30.51.161
6/10
Confidence
89%
Reports
145
Location
US
US
35.255.70.226
6/10
Confidence
89%
Reports
133
Location
US
US
35.239.248.73
6/10
Confidence
89%
Reports
130
Location
US
US
34.57.130.19
6/10
Confidence
89%
Reports
142
Location
US
US
34.170.26.236
6/10
Confidence
89%
Reports
133
Location
US
US
35.222.42.233
6/10
Confidence
89%
Reports
21
Location
US
US
136.65.52.50
6/10
Confidence
89%
Reports
18
Location
US
US
34.59.171.188
6/10
Confidence
89%
Reports
27
Location
US
US
34.172.27.253
6/10
Confidence
89%
Reports
19
Location
US
US
34.67.93.38
6/10
Confidence
89%
Reports
27
Location
US
US