Significant Threat
IP 171.25.158.42 identified as significant threat (8/10) from 4 events.
Multiple malicious indicators detected. Confidence level: 47%.
More threatening than 90% of monitored IPs
IP Address
171.25.158.42
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Sweden
Location
Patrik Lagerman
ASN 35100
4
Reports
Mixed
Data Source
Threat Categories
Brute-Force
4
SSH
4
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
14. October 2026
Last Activity
17. October 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 35100) with generally good reputation. The ISP Patrik Lagerman maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
47%
Medium Confidence
Confidence History
14. Oct 2026 - 17. Oct 2026
47%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| Brute-Force SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 171.25.158.42
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SE
- ASN
- AS35100
- ISP
- Patrik Lagerman
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 4
- First Reported
- 14 Oct 2026
- Last Reported
- 17 Oct 2026, 12:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS35100
Patrik Lagerman
SE
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
13
Total IPs Monitored
696
Total Reports
53.5
Reports per IP
Network Context
This IP address belongs to Patrik Lagerman (AS35100), which manages 13 IP addresses in our monitoring system. Out of these, 696 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,001,470 reported IPs worldwide
Threat Level
8/10
avg: 6.2
+
Total Reports
4
avg: 8
--
Network Comparison
Compared against 25 IPs in ASN 35100
Threat Level
8/10
network avg: 8.5
=
Total Reports
4
network avg: 58
--
Network Patrik Lagerman has overall threat level 1/10
Geographic Comparison
Compared against 3,291 IPs in SE
Threat Level
8/10
country avg: 6.3
+
Total Reports
4
country avg: 11
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 Oct 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Thursday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
4
Brute-Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
912,124 threat incidents tracked globally • Last 24h: 217,862 Logs
FEED
Top Threat Sources
-
01
United States180,390 19.8% -
02
Brazil156,371 17.1%
-
03
India94,370 10.3%
-
04
China47,769 5.2%
-
05
SC29,341 3.2%
-
06
Argentina24,386 2.7%
-
07
Germany20,024 2.2%
-
08
Pakistan19,387 2.1%
-
09
Netherlands18,817 2.1%
-
10
Colombia18,234 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
45%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
88%
Reports
27
Location
SE
SE
171.25.158.47
10/10
Confidence
82%
Reports
325
Location
SE
SE
171.25.158.74
10/10
Confidence
82%
Reports
146
Location
SE
SE
171.25.158.82
10/10
Confidence
62%
Reports
118
Location
SE
SE
171.25.158.50
8/10
Confidence
61%
Reports
12
Location
SE
SE
171.25.158.70
10/10
Confidence
57%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
57%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
53%
Reports
108
Location
SE
SE
171.25.158.58
10/10
Confidence
53%
Reports
80
Location
SE
SE
91.90.25.76
8/10
Confidence
52%
Reports
5
Location
SE
SE
171.25.158.57
10/10
Confidence
51%
Reports
158
Location
SE
SE
171.25.158.155
6/10
Confidence
26%
Reports
2
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
6/10
Confidence
24%
Reports
2
Location
SE
SE
193.27.192.154
6/10
Confidence
24%
Reports
1
Location
SE
SE
193.27.192.155
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.150
6/10
Confidence
22%
Reports
1
Location
SE
SE
171.25.158.97
10/10
Confidence
17%
Reports
9
Location
SE
SE
31.44.238.25
8/10
Confidence
9%
Reports
6
Location
SE
SE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.8/10
Avg Threat
39%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
171.25.158.87
10/10
Confidence
88%
Reports
27
Location
SE
SE
171.25.158.47
10/10
Confidence
82%
Reports
325
Location
SE
SE
171.25.158.74
10/10
Confidence
82%
Reports
146
Location
SE
SE
171.25.158.82
10/10
Confidence
62%
Reports
118
Location
SE
SE
171.25.158.50
8/10
Confidence
61%
Reports
12
Location
SE
SE
171.25.158.70
10/10
Confidence
57%
Reports
168
Location
SE
SE
171.25.158.68
10/10
Confidence
57%
Reports
145
Location
SE
SE
171.25.158.24
10/10
Confidence
53%
Reports
108
Location
SE
SE
171.25.158.58
10/10
Confidence
53%
Reports
80
Location
SE
SE
171.25.158.57
10/10
Confidence
51%
Reports
158
Location
SE
SE
171.25.158.155
6/10
Confidence
26%
Reports
2
Location
SE
SE
171.25.158.80
10/10
Confidence
24%
Reports
73
Location
SE
SE
171.25.158.157
6/10
Confidence
24%
Reports
2
Location
SE
SE
171.25.158.113
6/10
Confidence
23%
Reports
1
Location
SE
SE
171.25.158.150
6/10
Confidence
22%
Reports
1
Location
SE
SE
171.25.158.97
10/10
Confidence
17%
Reports
9
Location
SE
SE
171.25.158.73
10/10
Confidence
2%
Reports
53
Location
SE
SE
171.25.158.53
10/10
Confidence
2%
Reports
15
Location
SE
SE
171.25.158.88
7/10
Confidence
2%
Reports
1
Location
SE
SE
171.25.158.54
7/10
Confidence
0%
Reports
1
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.217.0.192
10/10
Confidence
94%
Reports
41
ISP
w1n ltd
172.160.227.37
10/10
Confidence
93%
Reports
17
ISP
Microsoft Corpo...
94.254.118.199
10/10
Confidence
93%
Reports
11
ISP
Bahnhof AB
90.233.222.185
8/10
Confidence
92%
Reports
15
ISP
Telia Company AB
213.102.87.128
8/10
Confidence
90%
Reports
15
ISP
Tele2 SWIPnet
84.32.49.219
7/10
Confidence
89%
Reports
20
ISP
UAB Cherry Servers
171.25.158.87
10/10
Confidence
88%
Reports
27
ISP
Patrik Lagerman
85.224.251.162
10/10
Confidence
88%
Reports
24
ISP
Telenor Sverige AB
170.62.100.121
8/10
Confidence
87%
Reports
9
ISP
Datacamp Limited
170.62.100.156
8/10
Confidence
85%
Reports
11
ISP
Datacamp Limited
195.178.191.5
10/10
Confidence
83%
Reports
235
ISP
Bahnhof AB
194.76.113.51
10/10
Confidence
83%
Reports
228
ISP
Datacamp Limited
171.25.158.47
10/10
Confidence
82%
Reports
325
ISP
Patrik Lagerman
171.25.158.74
10/10
Confidence
82%
Reports
146
ISP
Patrik Lagerman
185.246.128.133
10/10
Confidence
78%
Reports
12,915
ISP
w1n ltd
IPs with similar threat level and confidence scores.
15
Related IPs
7.7/10
Avg Threat
47%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
150.242.97.36
10/10
Confidence
47%
Reports
4
Location
CN
CN
86.38.187.114
10/10
Confidence
47%
Reports
3
Location
LT
LT
151.245.103.76
6/10
Confidence
47%
Reports
4
Location
US
US
89.152.226.245
6/10
Confidence
47%
Reports
4
Location
PT
PT
23.95.197.218
10/10
Confidence
47%
Reports
5
Location
US
US
185.223.152.202
8/10
Confidence
47%
Reports
16
Location
US
US
185.217.24.247
6/10
Confidence
47%
Reports
6
Location
US
US
202.51.91.163
6/10
Confidence
47%
Reports
4
Location
US
US
46.28.198.252
6/10
Confidence
47%
Reports
4
Location
US
US
167.89.10.203
5/10
Confidence
47%
Reports
5
Location
US
US
192.81.131.73
10/10
Confidence
47%
Reports
8
Location
US
US
5.45.102.93
10/10
Confidence
47%
Reports
8
Location
DE
DE
180.92.148.200
6/10
Confidence
47%
Reports
4
Location
US
US
23.234.77.44
7/10
Confidence
47%
Reports
4
Location
US
US
138.68.74.149
10/10
Confidence
47%
Reports
3
Location
DE
DE