Critical Alert
Security alert: 171.25.158.169 rated 10/10 based on 5 verified incidents.
Threat profile indicates sustained malicious activity with 63% confidence rating.
More threatening than 99% of monitored IPs
IP Address
171.25.158.169
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Sweden
Location
Patrik Lagerman
ASN 35100
5
Reports
Mixed
Data Source
Threat Categories
SSH
4
Hacking
2
Brute-Force
2
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
20. October 2026
Last Activity
22. October 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 35100) with generally good reputation. The ISP Patrik Lagerman maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
63%
High Confidence
Confidence History
20. Oct 2026 - 22. Oct 2026
63%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 171.25.158.169
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SE
- ASN
- AS35100
- ISP
- Patrik Lagerman
DNS Information
- Reverse DNS
- srv2.cosmotechco.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 26 Oct 2026
- Last Reported
- 22 Oct 2026, 23:26
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS35100
Patrik Lagerman
SE
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
13
Total IPs Monitored
696
Total Reports
53.5
Reports per IP
Network Context
This IP address belongs to Patrik Lagerman (AS35100), which manages 13 IP addresses in our monitoring system. Out of these, 696 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,252,086 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
5
avg: 7
-
Network Comparison
Compared against 28 IPs in ASN 35100
Threat Level
10/10
network avg: 8.6
+
Total Reports
5
network avg: 53
--
Network Patrik Lagerman has overall threat level 1/10
Geographic Comparison
Compared against 4,254 IPs in SE
Threat Level
10/10
country avg: 6.1
++
Total Reports
5
country avg: 9
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Oct 2026
3 reports
Daily Average
0.2
reports/day
Most Active
Thursday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
4
Brute-Force
2
Hacking
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,141,619 threat incidents tracked globally • Last 24h: 30,863 Logs
FEED
Top Threat Sources
-
01
Brazil257,143 22.5% -
02
United States193,483 16.9% -
03
India97,733 8.6% -
04
China48,509 4.2% -
05
Argentina41,550 3.6% -
06
SC29,358 2.6% -
07
Mexico27,026 2.4% -
08
Russia25,819 2.3% -
09
Colombia23,895 2.1% -
10
Germany21,328 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
45%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
87%
Reports
33
Location
SE
SE
171.25.158.171
10/10
Confidence
77%
Reports
9
Location
SE
SE
171.25.158.47
10/10
Confidence
74%
Reports
325
Location
SE
SE
171.25.158.58
10/10
Confidence
74%
Reports
82
Location
SE
SE
171.25.158.74
10/10
Confidence
67%
Reports
146
Location
SE
SE
171.25.158.42
8/10
Confidence
53%
Reports
10
Location
SE
SE
171.25.158.82
10/10
Confidence
45%
Reports
118
Location
SE
SE
171.25.158.70
10/10
Confidence
44%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
43%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
42%
Reports
108
Location
SE
SE
171.25.158.50
8/10
Confidence
42%
Reports
12
Location
SE
SE
171.25.158.57
10/10
Confidence
41%
Reports
158
Location
SE
SE
91.90.25.76
8/10
Confidence
39%
Reports
5
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
7/10
Confidence
24%
Reports
3
Location
SE
SE
193.27.192.154
6/10
Confidence
24%
Reports
1
Location
SE
SE
171.25.158.155
7/10
Confidence
23%
Reports
4
Location
SE
SE
193.27.192.155
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.170
6/10
Confidence
22%
Reports
2
Location
SE
SE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.9/10
Avg Threat
42%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
87%
Reports
33
Location
SE
SE
171.25.158.171
10/10
Confidence
77%
Reports
9
Location
SE
SE
171.25.158.47
10/10
Confidence
74%
Reports
325
Location
SE
SE
171.25.158.58
10/10
Confidence
74%
Reports
82
Location
SE
SE
171.25.158.74
10/10
Confidence
67%
Reports
146
Location
SE
SE
171.25.158.42
8/10
Confidence
53%
Reports
10
Location
SE
SE
171.25.158.82
10/10
Confidence
45%
Reports
118
Location
SE
SE
171.25.158.70
10/10
Confidence
44%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
43%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
42%
Reports
108
Location
SE
SE
171.25.158.50
8/10
Confidence
42%
Reports
12
Location
SE
SE
171.25.158.57
10/10
Confidence
41%
Reports
158
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
7/10
Confidence
24%
Reports
3
Location
SE
SE
171.25.158.155
7/10
Confidence
23%
Reports
4
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.170
6/10
Confidence
22%
Reports
2
Location
SE
SE
171.25.158.150
6/10
Confidence
22%
Reports
1
Location
SE
SE
171.25.158.97
10/10
Confidence
17%
Reports
9
Location
SE
SE
171.25.158.73
10/10
Confidence
2%
Reports
53
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
172.160.227.37
10/10
Confidence
100%
Reports
22
ISP
Microsoft Corpo...
213.102.87.128
8/10
Confidence
95%
Reports
19
ISP
Tele2 SWIPnet
138.124.102.99
10/10
Confidence
94%
Reports
84
ISP
Aeza Group LLC
185.217.0.192
10/10
Confidence
94%
Reports
41
ISP
w1n ltd
13.62.143.68
10/10
Confidence
94%
Reports
35
ISP
Amazon.com, Inc.
70.34.218.137
10/10
Confidence
94%
Reports
16
ISP
The Constant Co...
13.62.142.172
10/10
Confidence
94%
Reports
14
ISP
Amazon.com, Inc.
94.254.118.199
10/10
Confidence
89%
Reports
11
ISP
Bahnhof AB
90.233.222.185
8/10
Confidence
88%
Reports
22
ISP
Telia Company AB
85.224.251.162
10/10
Confidence
87%
Reports
33
ISP
Telenor Sverige AB
171.25.158.87
10/10
Confidence
87%
Reports
33
ISP
Patrik Lagerman
195.178.191.5
10/10
Confidence
83%
Reports
244
ISP
Bahnhof AB
34.51.174.18
8/10
Confidence
80%
Reports
6
ISP
Google LLC
34.51.168.251
8/10
Confidence
79%
Reports
9
ISP
Google LLC
83.233.149.38
8/10
Confidence
78%
Reports
24
ISP
Bredband2 AB
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
63%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
203.34.56.12
8/10
Confidence
63%
Reports
26
Location
CN
CN
146.70.194.220
8/10
Confidence
63%
Reports
129
Location
FR
FR
2405:acc0:1304:b31:2195:2625:9d2f:60b3
10/10
Confidence
63%
Reports
5
Location
NP
NP
103.131.156.100
10/10
Confidence
63%
Reports
5
Location
BD
BD
197.63.19.249
10/10
Confidence
63%
Reports
5
Location
EG
EG
122.172.85.87
8/10
Confidence
63%
Reports
5
Location
IN
IN
93.152.220.177
10/10
Confidence
63%
Reports
7
Location
NL
NL
144.217.241.75
10/10
Confidence
63%
Reports
5
Location
CA
CA
136.242.112.210
6/10
Confidence
63%
Reports
9
Location
US
US
151.245.95.34
6/10
Confidence
63%
Reports
9
Location
US
US
161.115.227.212
6/10
Confidence
63%
Reports
9
Location
US
US
195.81.76.0
6/10
Confidence
63%
Reports
9
Location
US
US
31.14.254.101
8/10
Confidence
63%
Reports
8
Location
GB
GB
103.24.87.107
8/10
Confidence
63%
Reports
17
Location
IN
IN
109.87.205.108
10/10
Confidence
63%
Reports
24
Location
UA
UA