Critical Alert
Security alert: 16.5.0.133 rated 10/10 based on 66 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 99% of monitored IPs
IP Address
16.5.0.133
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
United States
Location
EMBNEX, LLC
ASN 401661
66
Reports
Honeypot
Data Source
Threat Categories
Hacking
23
Fraud VoIP
3
IoT Targeted
3
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
22. August 2026
Last Activity
3. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 401661) with generally good reputation. The ISP EMBNEX, LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
26. Aug 2026 - 3. Sep 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 16.5.0.133
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS401661
- ISP
- EMBNEX, LLC
DNS Information
- Reverse DNS
- embnex.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 66
- First Reported
- 22 Aug 2026
- Last Reported
- 3 Sep 2026, 08:18
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,392 reported IPs worldwide
Threat Level
10/10
avg: 5.8
++
Total Reports
66
avg: 9
++
Network Comparison
Compared against 24 IPs in ASN 401661
Threat Level
10/10
network avg: 8.2
+
Total Reports
66
network avg: 26
++
Geographic Comparison
Compared against 134,879 IPs in US
Threat Level
10/10
country avg: 6.3
++
Total Reports
66
country avg: 19
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Aug 2026
27 reports
Daily Average
2.2
reports/day
Most Active
Wednesday
27 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
57
Exploited Host
5
IoT Targeted
3
Fraud VoIP
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
698,011 threat incidents tracked globally • Last 24h: 22,705 Logs
FEED
Top Threat Sources
-
01
United States134,839 19.3% -
02
Brazil109,415 15.7%
-
03
India75,788 10.9%
-
04
China43,104 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,468 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,803 2.3%
-
09
Pakistan15,197 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.3/10
Avg Threat
52%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
16.5.0.236
8/10
Confidence
96%
Reports
332
Location
US
US
16.5.0.244
10/10
Confidence
94%
Reports
76
Location
US
US
16.5.0.132
10/10
Confidence
94%
Reports
47
Location
US
US
16.5.0.254
10/10
Confidence
94%
Reports
37
Location
US
US
16.5.0.245
10/10
Confidence
94%
Reports
23
Location
US
US
16.5.0.130
10/10
Confidence
85%
Reports
11
Location
US
US
16.5.0.242
10/10
Confidence
51%
Reports
3
Location
BR
BR
16.5.0.241
10/10
Confidence
51%
Reports
3
Location
BR
BR
16.5.0.238
10/10
Confidence
47%
Reports
3
Location
BR
BR
16.5.0.234
7/10
Confidence
40%
Reports
2
Location
BR
BR
16.5.0.173
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.180
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.217
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.171
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.164
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.166
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.167
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.165
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.189
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.240
7/10
Confidence
30%
Reports
1
Location
BR
BR
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.3/10
Avg Threat
52%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
16.5.0.236
8/10
Confidence
96%
Reports
332
Location
US
US
16.5.0.244
10/10
Confidence
94%
Reports
76
Location
US
US
16.5.0.132
10/10
Confidence
94%
Reports
47
Location
US
US
16.5.0.254
10/10
Confidence
94%
Reports
37
Location
US
US
16.5.0.245
10/10
Confidence
94%
Reports
23
Location
US
US
16.5.0.130
10/10
Confidence
85%
Reports
11
Location
US
US
16.5.0.242
10/10
Confidence
51%
Reports
3
Location
BR
BR
16.5.0.241
10/10
Confidence
51%
Reports
3
Location
BR
BR
16.5.0.238
10/10
Confidence
47%
Reports
3
Location
BR
BR
16.5.0.234
7/10
Confidence
40%
Reports
2
Location
BR
BR
16.5.0.173
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.180
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.217
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.171
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.164
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.166
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.167
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.165
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.189
7/10
Confidence
30%
Reports
1
Location
BR
BR
16.5.0.240
7/10
Confidence
30%
Reports
1
Location
BR
BR
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
92.118.39.77
10/10
Confidence
100%
Reports
296
ISP
Unmanaged Ltd
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
34.73.51.143
10/10
Confidence
100%
Reports
234
ISP
Google LLC
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
177
ISP
Limestone Netwo...
34.23.203.140
10/10
Confidence
100%
Reports
153
ISP
Google LLC
97.74.93.24
10/10
Confidence
100%
Reports
149
ISP
GoDaddy.com, LLC
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
72.167.50.103
8/10
Confidence
100%
Reports
129
ISP
GoDaddy.com, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
192.161.49.2
8/10
Confidence
94%
Reports
4,647
Location
US
US
66.163.122.211
10/10
Confidence
94%
Reports
4,231
Location
US
US
45.198.224.18
10/10
Confidence
94%
Reports
4,053
Location
US
US
5.187.35.26
8/10
Confidence
94%
Reports
3,724
Location
NL
NL
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
213.209.159.136
10/10
Confidence
94%
Reports
3,479
Location
TW
TW
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
5.187.35.142
8/10
Confidence
94%
Reports
3,018
Location
NL
NL
177.125.137.18
10/10
Confidence
94%
Reports
2,963
Location
MX
MX
45.205.1.110
10/10
Confidence
94%
Reports
2,318
Location
US
US
87.251.64.159
10/10
Confidence
94%
Reports
2,236
Location
US
US
91.92.40.66
10/10
Confidence
94%
Reports
2,101
Location
BG
BG
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2