Critical Alert
Security alert: 163.128.165.125 rated 10/10 based on 7 verified incidents.
Threat profile indicates sustained malicious activity with 70% confidence rating.
More threatening than 99% of monitored IPs
IP Address
163.128.165.125
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
India
Location
OM SHIV SAI INTERNET SERV...
ASN 149214
7
Reports
Mixed
Data Source
Threat Categories
Brute-Force
7
Web App Attack
6
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
28. September 2026
Last Activity
9. October 2026
Recent (7 days)
6 incidents
Reputable Network
This IP is hosted on a network (ASN 149214) with generally good reputation. The ISP OM SHIV SAI INTERNET SERVICE OPC PVT LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
70%
High Confidence
Confidence History
28. Sep 2026 - 9. Oct 2026
70%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 163.128.165.125
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
IN
- ASN
- AS149214
- ISP
- OM SHIV SAI INTERNET SERVICE OPC PVT LTD
DNS Information
- Reverse DNS
- ip-163.128.165.125.rdns.omshivsai.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 7
- First Reported
- 28 Sep 2026
- Last Reported
- 9 Oct 2026, 06:43
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 839,743 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
7
avg: 9
-
Network Comparison
Compared against 11 IPs in ASN 149214
Threat Level
10/10
network avg: 8.1
+
Total Reports
7
network avg: 4
++
Geographic Comparison
Compared against 88,507 IPs in IN
Threat Level
10/10
country avg: 6.6
++
Total Reports
7
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
5 Oct 2026
3 reports
Daily Average
0.2
reports/day
Most Active
Monday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
7
Web App Attack
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
763,344 threat incidents tracked globally • Last 24h: 30,188 Logs
FEED
Top Threat Sources
-
01
United States149,271 19.6% -
02
Brazil112,195 14.7%
-
03
India88,509 11.6%
-
04
China46,301 6.1%
-
05
SC29,255 3.8%
-
06
Germany18,587 2.4%
-
07
Netherlands18,122 2.4%
-
08
Pakistan18,078 2.4%
-
09
Argentina16,393 2.1%
-
10
Colombia15,220 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
10
Related IPs
7.9/10
Avg Threat
17%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
163.128.165.203
8/10
Confidence
37%
Reports
6
Location
IN
IN
163.128.165.32
8/10
Confidence
35%
Reports
4
Location
IN
IN
163.128.165.199
10/10
Confidence
28%
Reports
3
Location
IN
IN
103.187.123.84
6/10
Confidence
23%
Reports
1
Location
IN
IN
163.128.165.47
8/10
Confidence
13%
Reports
4
Location
IN
IN
163.128.165.227
7/10
Confidence
12%
Reports
1
Location
IN
IN
103.178.253.58
10/10
Confidence
8%
Reports
11
Location
IN
IN
163.128.165.205
8/10
Confidence
5%
Reports
3
Location
IN
IN
163.128.165.165
6/10
Confidence
3%
Reports
2
Location
IN
IN
163.128.165.254
8/10
Confidence
2%
Reports
3
Location
IN
IN
IPs from the same subnet range, likely same network segment.
8
Related IPs
7.9/10
Avg Threat
17%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
163.128.165.203
8/10
Confidence
37%
Reports
6
Location
IN
IN
163.128.165.32
8/10
Confidence
35%
Reports
4
Location
IN
IN
163.128.165.199
10/10
Confidence
28%
Reports
3
Location
IN
IN
163.128.165.47
8/10
Confidence
13%
Reports
4
Location
IN
IN
163.128.165.227
7/10
Confidence
12%
Reports
1
Location
IN
IN
163.128.165.205
8/10
Confidence
5%
Reports
3
Location
IN
IN
163.128.165.165
6/10
Confidence
3%
Reports
2
Location
IN
IN
163.128.165.254
8/10
Confidence
2%
Reports
3
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
160.187.54.114
10/10
Confidence
100%
Reports
139
ISP
Imegh Private L...
69.57.172.119
8/10
Confidence
100%
Reports
73
ISP
WHG Hosting Ser...
103.47.15.110
10/10
Confidence
100%
Reports
62
ISP
Precious netcom...
103.130.90.169
10/10
Confidence
100%
Reports
51
ISP
Skylink Fiberne...
139.59.83.112
10/10
Confidence
100%
Reports
37
ISP
DigitalOcean, LLC
121.242.232.147
10/10
Confidence
100%
Reports
32
ISP
TATA Communicat...
202.176.1.225
10/10
Confidence
100%
Reports
32
ISP
RailTel Corpora...
103.192.199.245
10/10
Confidence
100%
Reports
30
ISP
NEEVAI SUPERCLO...
183.82.103.178
8/10
Confidence
100%
Reports
27
ISP
Atria Convergen...
103.58.64.209
10/10
Confidence
100%
Reports
25
ISP
INFONET COMM EN...
14.96.50.90
8/10
Confidence
100%
Reports
25
ISP
Tata Teleservic...
106.51.93.11
8/10
Confidence
100%
Reports
24
ISP
Atria Convergen...
182.70.255.242
10/10
Confidence
100%
Reports
24
ISP
Bharti Airtel L...
122.168.197.138
10/10
Confidence
100%
Reports
22
ISP
Bharti Airtel L...
183.83.172.107
8/10
Confidence
100%
Reports
21
ISP
Atria Convergen...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
70%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.37.210.164
10/10
Confidence
70%
Reports
5
Location
CN
CN
109.126.5.96
10/10
Confidence
70%
Reports
5
Location
RU
RU
163.223.49.137
10/10
Confidence
70%
Reports
8
Location
IN
IN
109.160.32.139
10/10
Confidence
70%
Reports
5
Location
BG
BG
178.105.176.231
10/10
Confidence
70%
Reports
10
Location
DE
DE
89.109.45.190
10/10
Confidence
70%
Reports
5
Location
RU
RU
202.71.156.76
10/10
Confidence
70%
Reports
5
Location
IN
IN
92.30.241.106
10/10
Confidence
70%
Reports
8
Location
GB
GB
124.217.8.134
10/10
Confidence
70%
Reports
6
Location
PH
PH
202.153.228.180
10/10
Confidence
70%
Reports
6
Location
ID
ID
35.198.0.140
10/10
Confidence
70%
Reports
9
Location
BR
BR
35.194.255.156
10/10
Confidence
70%
Reports
9
Location
TW
TW
124.104.196.82
10/10
Confidence
70%
Reports
7
Location
PH
PH
61.9.8.190
10/10
Confidence
70%
Reports
6
Location
PH
PH
61.9.8.114
10/10
Confidence
70%
Reports
6
Location
PH
PH