Extreme Threat
IP 171.25.158.171 classified at threat level 10/10 with 9 documented attacks.
Advanced threat indicators confirmed with 77% certainty.
More threatening than 99% of monitored IPs
IP Address
171.25.158.171
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Sweden
Location
Patrik Lagerman
ASN 35100
9
Reports
Mixed
Data Source
Threat Categories
SSH
8
Brute-Force
6
Hacking
2
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 6 days indicates persistent threat actor operations.
First Observed
19. October 2026
Last Activity
25. October 2026
Recent (7 days)
8 incidents
Reputable Network
This IP is hosted on a network (ASN 35100) with generally good reputation. The ISP Patrik Lagerman maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
77%
Verified
Confidence History
19. Oct 2026 - 25. Oct 2026
77%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Brute-Force | Community | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 171.25.158.171
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SE
- ASN
- AS35100
- ISP
- Patrik Lagerman
DNS Information
- Reverse DNS
- smtp171.cosmotechco.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 9
- First Reported
- 26 Oct 2026
- Last Reported
- 25 Oct 2026, 13:59
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS35100
Patrik Lagerman
SE
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
13
Total IPs Monitored
696
Total Reports
53.5
Reports per IP
Network Context
This IP address belongs to Patrik Lagerman (AS35100), which manages 13 IP addresses in our monitoring system. Out of these, 696 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,252,086 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
9
avg: 7
+
Network Comparison
Compared against 28 IPs in ASN 35100
Threat Level
10/10
network avg: 8.6
+
Total Reports
9
network avg: 53
--
Network Patrik Lagerman has overall threat level 1/10
Geographic Comparison
Compared against 4,254 IPs in SE
Threat Level
10/10
country avg: 6.1
++
Total Reports
9
country avg: 9
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Oct 2026
4 reports
Daily Average
0.3
reports/day
Most Active
Thursday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
8
Brute-Force
6
Hacking
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,141,619 threat incidents tracked globally • Last 24h: 30,863 Logs
FEED
Top Threat Sources
-
01
Brazil257,143 22.5% -
02
United States193,483 16.9% -
03
India97,733 8.6% -
04
China48,509 4.2% -
05
Argentina41,550 3.6% -
06
SC29,358 2.6% -
07
Mexico27,026 2.4% -
08
Russia25,819 2.3% -
09
Colombia23,895 2.1% -
10
Germany21,328 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
44%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
87%
Reports
33
Location
SE
SE
171.25.158.47
10/10
Confidence
74%
Reports
325
Location
SE
SE
171.25.158.58
10/10
Confidence
74%
Reports
82
Location
SE
SE
171.25.158.74
10/10
Confidence
67%
Reports
146
Location
SE
SE
171.25.158.169
10/10
Confidence
63%
Reports
5
Location
SE
SE
171.25.158.42
8/10
Confidence
53%
Reports
10
Location
SE
SE
171.25.158.82
10/10
Confidence
45%
Reports
118
Location
SE
SE
171.25.158.70
10/10
Confidence
44%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
43%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
42%
Reports
108
Location
SE
SE
171.25.158.50
8/10
Confidence
42%
Reports
12
Location
SE
SE
171.25.158.57
10/10
Confidence
41%
Reports
158
Location
SE
SE
91.90.25.76
8/10
Confidence
39%
Reports
5
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
7/10
Confidence
24%
Reports
3
Location
SE
SE
193.27.192.154
6/10
Confidence
24%
Reports
1
Location
SE
SE
171.25.158.155
7/10
Confidence
23%
Reports
4
Location
SE
SE
193.27.192.155
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.170
6/10
Confidence
22%
Reports
2
Location
SE
SE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.9/10
Avg Threat
42%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
87%
Reports
33
Location
SE
SE
171.25.158.47
10/10
Confidence
74%
Reports
325
Location
SE
SE
171.25.158.58
10/10
Confidence
74%
Reports
82
Location
SE
SE
171.25.158.74
10/10
Confidence
67%
Reports
146
Location
SE
SE
171.25.158.169
10/10
Confidence
63%
Reports
5
Location
SE
SE
171.25.158.42
8/10
Confidence
53%
Reports
10
Location
SE
SE
171.25.158.82
10/10
Confidence
45%
Reports
118
Location
SE
SE
171.25.158.70
10/10
Confidence
44%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
43%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
42%
Reports
108
Location
SE
SE
171.25.158.50
8/10
Confidence
42%
Reports
12
Location
SE
SE
171.25.158.57
10/10
Confidence
41%
Reports
158
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
7/10
Confidence
24%
Reports
3
Location
SE
SE
171.25.158.155
7/10
Confidence
23%
Reports
4
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.170
6/10
Confidence
22%
Reports
2
Location
SE
SE
171.25.158.150
6/10
Confidence
22%
Reports
1
Location
SE
SE
171.25.158.97
10/10
Confidence
17%
Reports
9
Location
SE
SE
171.25.158.73
10/10
Confidence
2%
Reports
53
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
172.160.227.37
10/10
Confidence
100%
Reports
22
ISP
Microsoft Corpo...
213.102.87.128
8/10
Confidence
95%
Reports
19
ISP
Tele2 SWIPnet
138.124.102.99
10/10
Confidence
94%
Reports
84
ISP
Aeza Group LLC
185.217.0.192
10/10
Confidence
94%
Reports
41
ISP
w1n ltd
13.62.143.68
10/10
Confidence
94%
Reports
35
ISP
Amazon.com, Inc.
70.34.218.137
10/10
Confidence
94%
Reports
16
ISP
The Constant Co...
13.62.142.172
10/10
Confidence
94%
Reports
14
ISP
Amazon.com, Inc.
94.254.118.199
10/10
Confidence
89%
Reports
11
ISP
Bahnhof AB
90.233.222.185
8/10
Confidence
88%
Reports
22
ISP
Telia Company AB
85.224.251.162
10/10
Confidence
87%
Reports
33
ISP
Telenor Sverige AB
171.25.158.87
10/10
Confidence
87%
Reports
33
ISP
Patrik Lagerman
195.178.191.5
10/10
Confidence
83%
Reports
244
ISP
Bahnhof AB
34.51.174.18
8/10
Confidence
80%
Reports
6
ISP
Google LLC
34.51.168.251
8/10
Confidence
79%
Reports
9
ISP
Google LLC
83.233.149.38
8/10
Confidence
78%
Reports
24
ISP
Bredband2 AB
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
77%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
101.66.165.103
10/10
Confidence
77%
Reports
38
Location
CN
CN
45.134.142.210
8/10
Confidence
77%
Reports
32
Location
US
US
147.185.133.94
10/10
Confidence
77%
Reports
122
Location
US
US
198.235.24.112
8/10
Confidence
77%
Reports
254
Location
US
US
150.241.244.61
8/10
Confidence
77%
Reports
12
Location
IN
IN
102.67.178.159
10/10
Confidence
77%
Reports
15
Location
ZA
ZA
162.216.150.199
10/10
Confidence
77%
Reports
116
Location
US
US
35.203.211.39
10/10
Confidence
77%
Reports
124
Location
GB
GB
147.185.132.17
10/10
Confidence
77%
Reports
143
Location
US
US
162.216.150.212
10/10
Confidence
77%
Reports
139
Location
US
US
47.250.116.24
8/10
Confidence
77%
Reports
18
Location
MY
MY
186.241.105.254
10/10
Confidence
77%
Reports
45
Location
US
US
104.223.7.60
6/10
Confidence
77%
Reports
12
Location
US
US
2.59.14.122
6/10
Confidence
77%
Reports
12
Location
US
US
94.139.61.106
6/10
Confidence
77%
Reports
12
Location
US
US