Substantial Risk
Threat level 8/10 for 167.99.181.249 based on 18 documented incidents.
Consistent suspicious behavior patterns. 84% confidence rating.
More threatening than 90% of monitored IPs
IP Address
167.99.181.249
IPv4
Public
CA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CA
Location
DIGITALOCEAN-ASN
ASN 14061
18
Reports
Mixed
Data Source
Threat Categories
Hacking
12
Web App Attack
7
WP Plugin Exploit
7
WP Config Exposure
7
WP User Enumeration
6
Port Scan
5
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
27. September 2026
Last Activity
8. October 2026
Recent (7 days)
1 incidents
Cloud Infrastructure
This IP operates from DigitalOcean cloud infrastructure. Cloud-hosted threats can be provisioned and abandoned quickly, affecting attribution.
Cloud-hosted malicious activity often indicates automated or scalable attack infrastructure.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
84%
Verified
Confidence History
5. Feb 2026 - 8. Oct 2026
84%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Port Scan Hacking Web App Attack +7 | Honeypot x6 | 75% |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Port Scan Hacking Web App Attack +3 | Honeypot x3 | 75% | |
| Port Scan Hacking Web App Attack +7 | Honeypot x6 | 75% | |
| WP Config Exposure WP Plugin Exploit WP User Enumeration | Honeypot x3 | 75% | |
| WP Config Exposure WP Plugin Exploit WP User Enumeration | Honeypot x3 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Community | 75% | |
| Port Scan Hacking WP Config Exposure +5 | Honeypot x10 | 75% | |
| Port Scan Hacking WP Plugin Exploit +2 | Honeypot x5 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot x19 | 75% | |
| Hacking | Honeypot x21 | 75% |
Technical Details
Basic Information
- IP Address
- 167.99.181.249
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
CA
- ASN
- AS14061
- ISP
- DIGITALOCEAN-ASN
DNS Information
- Reverse DNS
- b781e0bb13.scan.leakix.org
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 5 Feb 2026
- Last Reported
- 8 Oct 2026, 22:57
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14061
DigitalOcean, LLC
NL
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10,971
Total IPs Monitored
417,845
Total Reports
38.1
Reports per IP
Network Context
This IP address belongs to DigitalOcean, LLC (AS14061), which manages 10,971 IP addresses in our monitoring system. Out of these, 417,845 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 837,776 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
18
avg: 9
++
Network Comparison
Compared against 24,617 IPs in ASN 14061
Threat Level
8/10
network avg: 7.5
=
Total Reports
18
network avg: 25
-
Network DIGITALOCEAN-ASN has overall threat level 4/10
Geographic Comparison
Compared against 6,720 IPs in CA
Threat Level
8/10
country avg: 6.9
+
Total Reports
18
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 Sep 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Wednesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
12
WP Plugin Exploit
7
WP Config Exposure
7
Web App Attack
7
WP User Enumeration
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
761,580 threat incidents tracked globally • Last 24h: 30,347 Logs
FEED
Top Threat Sources
-
01
United States149,044 19.6% -
02
Brazil112,099 14.7%
-
03
India88,130 11.6%
-
04
China46,240 6.1%
-
05
SC29,255 3.8%
-
06
Germany18,549 2.4%
-
07
Netherlands18,096 2.4%
-
08
Pakistan18,020 2.4%
-
09
Argentina16,337 2.1%
-
10
Colombia15,199 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
Location
US
US
139.59.83.112
10/10
Confidence
100%
Reports
37
Location
IN
IN
188.166.159.7
10/10
Confidence
100%
Reports
32
Location
GB
GB
167.172.176.118
10/10
Confidence
100%
Reports
23
Location
DE
DE
157.230.59.111
10/10
Confidence
100%
Reports
22
Location
US
US
167.71.81.88
8/10
Confidence
100%
Reports
21
Location
US
US
159.65.5.51
10/10
Confidence
100%
Reports
21
Location
SG
SG
157.230.218.106
10/10
Confidence
100%
Reports
18
Location
US
US
167.99.210.137
8/10
Confidence
100%
Reports
18
Location
NL
NL
174.138.12.72
10/10
Confidence
100%
Reports
17
Location
NL
NL
209.38.69.12
8/10
Confidence
100%
Reports
16
Location
US
US
159.65.224.88
10/10
Confidence
100%
Reports
15
Location
US
US
143.110.217.244
8/10
Confidence
100%
Reports
15
Location
CA
CA
209.38.120.71
10/10
Confidence
99%
Reports
18
Location
IN
IN
206.81.24.74
8/10
Confidence
99%
Reports
17
Location
DE
DE
188.166.29.60
10/10
Confidence
99%
Reports
16
Location
NL
NL
46.101.137.209
10/10
Confidence
99%
Reports
15
Location
DE
DE
147.182.149.75
8/10
Confidence
99%
Reports
14
Location
CA
CA
134.209.147.251
8/10
Confidence
98%
Reports
91
Location
IN
IN
164.92.211.98
8/10
Confidence
98%
Reports
59
Location
NL
NL
IPs from the same subnet range, likely same network segment.
3
Related IPs
6.3/10
Avg Threat
22%
Avg Confidence
1
High Threat
Elevated risk: Multiple related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.4/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
74.14.187.125
8/10
Confidence
100%
Reports
30
ISP
Bell Canada
34.95.60.17
8/10
Confidence
100%
Reports
29
ISP
Google LLC
35.203.5.98
8/10
Confidence
100%
Reports
23
ISP
Google LLC
34.19.168.225
10/10
Confidence
100%
Reports
21
ISP
Google LLC
34.118.187.111
8/10
Confidence
100%
Reports
17
ISP
Google LLC
34.118.181.37
8/10
Confidence
100%
Reports
16
ISP
Google LLC
143.110.217.244
8/10
Confidence
100%
Reports
15
ISP
DigitalOcean, LLC
174.88.170.213
8/10
Confidence
100%
Reports
13
ISP
Bell Canada
147.182.149.75
8/10
Confidence
99%
Reports
14
ISP
DigitalOcean, LLC
34.19.213.96
8/10
Confidence
98%
Reports
13
ISP
Google LLC
66.222.166.62
8/10
Confidence
97%
Reports
13
ISP
TELUS Communica...
89.251.0.32
8/10
Confidence
97%
Reports
10
ISP
Orion Network L...
159.203.46.22
10/10
Confidence
96%
Reports
58
ISP
DigitalOcean, LLC
51.222.156.111
10/10
Confidence
96%
Reports
57
ISP
OVH SAS
153.68.200.248
8/10
Confidence
96%
Reports
21
ISP
TELUS Communica...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
49.36.16.44
10/10
Confidence
84%
Reports
8
Location
IN
IN
123.20.15.83
10/10
Confidence
84%
Reports
7
Location
VN
VN
188.92.131.62
8/10
Confidence
84%
Reports
11
Location
DE
DE
103.240.232.212
10/10
Confidence
84%
Reports
8
Location
IN
IN
101.189.82.235
10/10
Confidence
84%
Reports
8
Location
AU
AU
103.171.189.64
10/10
Confidence
84%
Reports
8
Location
IN
IN
2a02:a58:8488:6000:5b5:49c:bdee:3e84
10/10
Confidence
84%
Reports
8
Location
RO
RO
89.109.51.76
10/10
Confidence
84%
Reports
8
Location
RU
RU
136.85.69.100
8/10
Confidence
84%
Reports
8
Location
SG
SG
2603:9001:a200:140c:a1d3:227:c345:4f9a
10/10
Confidence
84%
Reports
8
Location
US
US
120.60.110.244
10/10
Confidence
84%
Reports
8
Location
IN
IN
210.112.129.221
8/10
Confidence
84%
Reports
11
Location
KR
KR
35.245.119.157
8/10
Confidence
84%
Reports
8
Location
US
US
190.6.73.132
10/10
Confidence
84%
Reports
8
Location
CU
CU
146.59.16.244
8/10
Confidence
84%
Reports
8
Location
FR
FR