Notable Threat
IP 171.25.158.155 rated 7/10 from 3 verified reports.
Multiple security incidents attributed to this IP. Confidence: 30%.
More threatening than 85% of monitored IPs
IP Address
171.25.158.155
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Sweden
Location
Patrik Lagerman
ASN 35100
3
Reports
Community
Data Source
Threat Categories
Brute-Force
3
SSH
3
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 days indicates persistent threat actor operations.
First Observed
14. October 2026
Last Activity
18. October 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 35100) with generally good reputation. The ISP Patrik Lagerman maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
3/10
Low
Confidence Score
30%
Medium Confidence
Confidence History
14. Oct 2026 - 18. Oct 2026
30%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 171.25.158.155
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SE
- ASN
- AS35100
- ISP
- Patrik Lagerman
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 3
- First Reported
- 14 Oct 2026
- Last Reported
- 18 Oct 2026, 09:19
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS35100
Patrik Lagerman
SE
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
13
Total IPs Monitored
696
Total Reports
53.5
Reports per IP
Network Context
This IP address belongs to Patrik Lagerman (AS35100), which manages 13 IP addresses in our monitoring system. Out of these, 696 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,004,889 reported IPs worldwide
Threat Level
7/10
avg: 6.2
=
Total Reports
3
avg: 8
--
Network Comparison
Compared against 25 IPs in ASN 35100
Threat Level
7/10
network avg: 8.5
-
Total Reports
3
network avg: 59
--
Network Patrik Lagerman has overall threat level 1/10
Geographic Comparison
Compared against 3,302 IPs in SE
Threat Level
7/10
country avg: 6.3
=
Total Reports
3
country avg: 11
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Oct 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Sunday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
3
Brute-Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
914,560 threat incidents tracked globally • Last 24h: 215,837 Logs
FEED
Top Threat Sources
-
01
United States180,643 19.8% -
02
Brazil157,282 17.2%
-
03
India94,397 10.3%
-
04
China47,772 5.2%
-
05
SC29,341 3.2%
-
06
Argentina24,562 2.7%
-
07
Germany20,041 2.2%
-
08
Pakistan19,391 2.1%
-
09
Netherlands18,828 2.1%
-
10
Colombia18,269 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
46%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
88%
Reports
27
Location
SE
SE
171.25.158.47
10/10
Confidence
82%
Reports
325
Location
SE
SE
171.25.158.74
10/10
Confidence
82%
Reports
146
Location
SE
SE
171.25.158.82
10/10
Confidence
62%
Reports
118
Location
SE
SE
171.25.158.50
8/10
Confidence
61%
Reports
12
Location
SE
SE
171.25.158.70
10/10
Confidence
57%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
57%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
53%
Reports
108
Location
SE
SE
171.25.158.58
10/10
Confidence
53%
Reports
80
Location
SE
SE
91.90.25.76
8/10
Confidence
52%
Reports
5
Location
SE
SE
171.25.158.57
10/10
Confidence
51%
Reports
158
Location
SE
SE
171.25.158.42
8/10
Confidence
47%
Reports
4
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
6/10
Confidence
24%
Reports
2
Location
SE
SE
193.27.192.154
6/10
Confidence
24%
Reports
1
Location
SE
SE
193.27.192.155
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.150
6/10
Confidence
22%
Reports
1
Location
SE
SE
171.25.158.97
10/10
Confidence
17%
Reports
9
Location
SE
SE
31.44.238.25
8/10
Confidence
9%
Reports
6
Location
SE
SE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.9/10
Avg Threat
40%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
88%
Reports
27
Location
SE
SE
171.25.158.47
10/10
Confidence
82%
Reports
325
Location
SE
SE
171.25.158.74
10/10
Confidence
82%
Reports
146
Location
SE
SE
171.25.158.82
10/10
Confidence
62%
Reports
118
Location
SE
SE
171.25.158.50
8/10
Confidence
61%
Reports
12
Location
SE
SE
171.25.158.70
10/10
Confidence
57%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
57%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
53%
Reports
108
Location
SE
SE
171.25.158.58
10/10
Confidence
53%
Reports
80
Location
SE
SE
171.25.158.57
10/10
Confidence
51%
Reports
158
Location
SE
SE
171.25.158.42
8/10
Confidence
47%
Reports
4
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
6/10
Confidence
24%
Reports
2
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.150
6/10
Confidence
22%
Reports
1
Location
SE
SE
171.25.158.97
10/10
Confidence
17%
Reports
9
Location
SE
SE
171.25.158.73
10/10
Confidence
2%
Reports
53
Location
SE
SE
171.25.158.53
10/10
Confidence
2%
Reports
15
Location
SE
SE
171.25.158.88
7/10
Confidence
2%
Reports
1
Location
SE
SE
171.25.158.54
7/10
Confidence
0%
Reports
1
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.217.0.192
10/10
Confidence
94%
Reports
41
ISP
w1n ltd
172.160.227.37
10/10
Confidence
93%
Reports
17
ISP
Microsoft Corpo...
94.254.118.199
10/10
Confidence
93%
Reports
11
ISP
Bahnhof AB
90.233.222.185
8/10
Confidence
92%
Reports
15
ISP
Telia Company AB
213.102.87.128
8/10
Confidence
90%
Reports
15
ISP
Tele2 SWIPnet
84.32.49.219
7/10
Confidence
89%
Reports
20
ISP
UAB Cherry Servers
171.25.158.87
10/10
Confidence
88%
Reports
27
ISP
Patrik Lagerman
85.224.251.162
10/10
Confidence
88%
Reports
24
ISP
Telenor Sverige AB
170.62.100.121
8/10
Confidence
87%
Reports
9
ISP
Datacamp Limited
170.62.100.156
8/10
Confidence
85%
Reports
11
ISP
Datacamp Limited
195.178.191.5
10/10
Confidence
83%
Reports
235
ISP
Bahnhof AB
194.76.113.51
10/10
Confidence
83%
Reports
228
ISP
Datacamp Limited
171.25.158.47
10/10
Confidence
82%
Reports
325
ISP
Patrik Lagerman
171.25.158.74
10/10
Confidence
82%
Reports
146
ISP
Patrik Lagerman
185.246.128.133
10/10
Confidence
78%
Reports
12,929
ISP
w1n ltd
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
30%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.90.122.158
10/10
Confidence
30%
Reports
3
Location
LI
LI
2400:1a00:3b47:ef81:fc48:4634:d18c:6b0c
10/10
Confidence
30%
Reports
4
Location
NP
NP
2a12:90c1:a:1:ef:b4ff:fe91:1c56
10/10
Confidence
30%
Reports
3
Location
DE
DE
103.97.212.204
10/10
Confidence
30%
Reports
3
Location
IN
IN
171.250.8.64
10/10
Confidence
30%
Reports
3
Location
VN
VN
153.117.53.231
10/10
Confidence
30%
Reports
3
Location
PK
PK
161.248.48.3
10/10
Confidence
30%
Reports
3
Location
IN
IN
138.197.166.148
10/10
Confidence
30%
Reports
5
Location
CA
CA
105.74.66.34
10/10
Confidence
30%
Reports
3
Location
MA
MA
157.85.206.150
10/10
Confidence
30%
Reports
3
Location
ID
ID
152.58.152.107
10/10
Confidence
30%
Reports
3
Location
IN
IN
203.192.213.57
10/10
Confidence
30%
Reports
3
Location
IN
IN
117.211.175.11
10/10
Confidence
30%
Reports
3
Location
IN
IN
105.112.17.83
10/10
Confidence
30%
Reports
3
Location
NG
NG
94.207.17.125
10/10
Confidence
30%
Reports
3
Location
AE
AE