Notable Threat
IP 165.22.95.96 rated 8/10 from 41 verified reports.
Multiple security incidents attributed to this IP. Confidence: 5%.
More threatening than 89% of monitored IPs
IP Address
165.22.95.96
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
DigitalOcean, LLC
ASN 14061
41
Reports
Mixed
Data Source
Threat Categories
Hacking
30
Brute-Force
11
WP Login Brute Force
11
Port Scan
11
WP XML-RPC Brute Force
11
DDoS Attack
8
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Implement appropriate security controls.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
2%
Low Confidence
Confidence History
22. Apr 2026 - 26. May 2026
5%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x9 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot x10 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot x10 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x9 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot x10 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 165.22.95.96
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS14061
- ISP
- DigitalOcean, LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 41
- First Reported
- 12 Apr 2026
- Last Reported
- 26 May 2026, 23:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,249,727 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
41
avg: 7
++
Network Comparison
Compared against 27,533 IPs in ASN 14061
Threat Level
8/10
network avg: 7.4
=
Total Reports
41
network avg: 24
++
Network DigitalOcean, LLC has overall threat level 4/10
Geographic Comparison
Compared against 21,262 IPs in DE
Threat Level
8/10
country avg: 7.2
=
Total Reports
41
country avg: 28
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
18 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
41
Port Scan
21
WP XML-RPC Brute Force
21
Brute-Force
12
WP Login Brute Force
12
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
1,139,464 threat incidents tracked globally • Last 24h: 30,789 Logs
FEED
Top Threat Sources
-
01
Brazil257,038 22.6% -
02
United States193,091 16.9% -
03
India97,251 8.5% -
04
China48,440 4.3% -
05
Argentina41,533 3.6% -
06
SC29,357 2.6% -
07
Mexico27,006 2.4% -
08
Russia25,797 2.3% -
09
Colombia23,892 2.1% -
10
Germany21,262 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
96%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
188.166.95.31
10/10
Confidence
100%
Reports
126
Location
NL
NL
139.59.83.112
10/10
Confidence
100%
Reports
50
Location
IN
IN
164.92.211.98
8/10
Confidence
98%
Reports
83
Location
NL
NL
104.248.160.169
8/10
Confidence
98%
Reports
23
Location
GB
GB
24.144.97.42
10/10
Confidence
96%
Reports
76
Location
US
US
157.230.208.221
8/10
Confidence
96%
Reports
40
Location
US
US
157.245.250.244
10/10
Confidence
96%
Reports
37
Location
US
US
134.122.126.211
10/10
Confidence
96%
Reports
32
Location
US
US
159.223.97.218
10/10
Confidence
96%
Reports
26
Location
US
US
128.199.117.212
8/10
Confidence
96%
Reports
25
Location
SG
SG
159.65.128.76
10/10
Confidence
96%
Reports
21
Location
SG
SG
134.209.147.61
8/10
Confidence
96%
Reports
20
Location
IN
IN
167.172.64.200
10/10
Confidence
96%
Reports
20
Location
SG
SG
139.59.234.78
10/10
Confidence
96%
Reports
19
Location
SG
SG
147.182.149.75
8/10
Confidence
96%
Reports
19
Location
CA
CA
167.172.158.128
8/10
Confidence
96%
Reports
15
Location
US
US
157.230.218.106
10/10
Confidence
95%
Reports
22
Location
US
US
46.101.137.209
10/10
Confidence
95%
Reports
17
Location
DE
DE
134.209.25.199
8/10
Confidence
95%
Reports
14
Location
GB
GB
167.99.170.205
10/10
Confidence
94%
Reports
4,336
Location
US
US
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
94%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,480
ISP
Feo Prest SRL
34.89.170.20
8/10
Confidence
100%
Reports
73
ISP
Google LLC
34.40.11.197
8/10
Confidence
100%
Reports
50
ISP
Google LLC
34.89.162.226
8/10
Confidence
100%
Reports
46
ISP
Google LLC
35.246.213.80
8/10
Confidence
100%
Reports
42
ISP
Google LLC
2a0e:d604:1:1ab::2
10/10
Confidence
100%
Reports
36
ISP
H2nexus Cloud S...
93.152.221.210
10/10
Confidence
100%
Reports
30
ISP
TechTies Inc.
93.152.221.36
10/10
Confidence
100%
Reports
25
ISP
TechTies Inc.
2600:3c17::2000:16ff:fe04:5586
10/10
Confidence
100%
Reports
18
ISP
Akamai Connecte...
213.165.52.39
10/10
Confidence
100%
Reports
17
ISP
Chsl One Ltd
35.246.249.43
10/10
Confidence
98%
Reports
112
ISP
Google LLC
35.198.92.138
8/10
Confidence
98%
Reports
64
ISP
Google LLC
34.179.185.147
10/10
Confidence
98%
Reports
57
ISP
Google LLC
34.89.179.232
8/10
Confidence
98%
Reports
46
ISP
Google LLC
35.198.90.114
8/10
Confidence
98%
Reports
24
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
5%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
155.138.206.133
10/10
Confidence
5%
Reports
4
Location
US
US
91.92.42.135
10/10
Confidence
5%
Reports
4
Location
NL
NL
49.49.138.191
10/10
Confidence
5%
Reports
3
Location
TH
TH
152.32.223.217
10/10
Confidence
5%
Reports
3
Location
VN
VN
91.92.200.230
10/10
Confidence
5%
Reports
3
Location
CH
CH
20.24.150.159
10/10
Confidence
5%
Reports
3
Location
SG
SG
145.224.119.224
10/10
Confidence
5%
Reports
3
Location
GR
GR
20.18.31.88
10/10
Confidence
5%
Reports
3
Location
JP
JP
78.36.238.198
10/10
Confidence
5%
Reports
3
Location
RU
RU
120.77.42.210
10/10
Confidence
5%
Reports
3
Location
CN
CN
27.79.47.12
10/10
Confidence
5%
Reports
3
Location
VN
VN
171.243.148.88
10/10
Confidence
5%
Reports
3
Location
VN
VN
18.117.112.214
10/10
Confidence
5%
Reports
3
Location
US
US
52.14.1.54
10/10
Confidence
5%
Reports
3
Location
US
US
45.74.17.131
10/10
Confidence
5%
Reports
3
Location
US
US