Significant Threat
IP 172.239.158.26 identified as significant threat (7/10) from 2 events.
Multiple malicious indicators detected. Confidence level: 40%.
More threatening than 85% of monitored IPs
IP Address
172.239.158.26
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
Akamai Connected Cloud
ASN 63949
2
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
2
Port Scan
1
Hacking
1
WP Config Exposure
1
Indiscriminate Scan
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 days indicates persistent threat actor operations.
First Observed
14. October 2026
Last Activity
15. October 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 63949) with generally good reputation. The ISP Akamai Connected Cloud maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
6/10
Moderate
Confidence Score
40%
Medium Confidence
Confidence History
14. Oct 2026 - 15. Oct 2026
40%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Port Scan Hacking WP Config Exposure +2 | Honeypot x3 | 75% |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 172.239.158.26
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS63949
- ISP
- Akamai Connected Cloud
DNS Information
- Reverse DNS
- d0ee6ad5.scanners.onlyscans.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 14 Oct 2026
- Last Reported
- 15 Oct 2026, 20:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS63949
Akamai Connected Cloud
US
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
652
Total IPs Monitored
15,636
Total Reports
24
Reports per IP
Network Context
This IP address belongs to Akamai Connected Cloud (AS63949), which manages 652 IP addresses in our monitoring system. Out of these, 15,636 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 913,087 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
2
avg: 9
--
Network Comparison
Compared against 2,375 IPs in ASN 63949
Threat Level
7/10
network avg: 7.7
=
Total Reports
2
network avg: 8
--
Network Akamai Connected Cloud has overall threat level 1/10
Geographic Comparison
Compared against 165,184 IPs in US
Threat Level
7/10
country avg: 6.7
=
Total Reports
2
country avg: 17
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Oct 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
2
Port Scan
1
Hacking
1
WP Config Exposure
1
Indiscriminate Scan
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
831,287 threat incidents tracked globally • Last 24h: 174,812 Logs
FEED
Top Threat Sources
-
01
United States165,591 19.9% -
02
Brazil125,584 15.1%
-
03
India93,608 11.3%
-
04
China47,575 5.7%
-
05
SC29,335 3.5%
-
06
Germany19,634 2.4%
-
07
Pakistan19,250 2.3%
-
08
Argentina18,885 2.3%
-
09
Netherlands18,717 2.3%
-
10
Colombia16,127 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
84%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
172.105.76.7
10/10
Confidence
98%
Reports
17
Location
DE
DE
45.33.95.158
10/10
Confidence
96%
Reports
37
Location
US
US
172.236.142.254
10/10
Confidence
94%
Reports
37
Location
SG
SG
139.162.25.65
10/10
Confidence
94%
Reports
33
Location
SG
SG
2600:3c17::2000:b9ff:fe1c:eaa6
10/10
Confidence
94%
Reports
11
Location
DE
DE
172.105.196.91
8/10
Confidence
88%
Reports
20
Location
JP
JP
172.105.208.132
10/10
Confidence
87%
Reports
46
Location
JP
JP
2400:8902::f03c:92ff:fefb:b436
6/10
Confidence
87%
Reports
13
Location
JP
JP
172.238.107.55
8/10
Confidence
83%
Reports
7
Location
DE
DE
139.162.70.53
10/10
Confidence
82%
Reports
56
Location
JP
JP
172.105.128.11
10/10
Confidence
80%
Reports
91
Location
US
US
85.90.246.159
8/10
Confidence
79%
Reports
80
Location
DE
DE
2a01:7e03::2000:e4ff:fed3:3768
8/10
Confidence
79%
Reports
12
Location
US
US
192.155.90.118
8/10
Confidence
78%
Reports
93
Location
US
US
172.236.228.229
10/10
Confidence
78%
Reports
88
Location
US
US
172.104.11.46
10/10
Confidence
78%
Reports
78
Location
US
US
172.236.228.202
10/10
Confidence
77%
Reports
99
Location
US
US
172.232.108.36
10/10
Confidence
77%
Reports
88
Location
IN
IN
172.236.228.218
10/10
Confidence
76%
Reports
102
Location
US
US
45.79.172.21
10/10
Confidence
76%
Reports
98
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.70.67.198
8/10
Confidence
100%
Reports
80
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
162.239.29.145
10/10
Confidence
100%
Reports
59
ISP
AT&T Enterprise...
136.71.31.178
8/10
Confidence
100%
Reports
41
ISP
Google LLC
136.70.242.68
8/10
Confidence
100%
Reports
40
ISP
Google LLC
170.106.115.142
8/10
Confidence
100%
Reports
38
ISP
Tencent Buildin...
136.90.100.228
8/10
Confidence
100%
Reports
32
ISP
Google LLC
34.11.81.227
8/10
Confidence
100%
Reports
31
ISP
Google LLC
166.62.41.13
10/10
Confidence
100%
Reports
29
ISP
GoDaddy.com, LLC
136.90.89.223
10/10
Confidence
100%
Reports
27
ISP
Google LLC
77.239.124.46
10/10
Confidence
100%
Reports
27
ISP
Banatsync Srl
IPs with similar threat level and confidence scores.
15
Related IPs
6.1/10
Avg Threat
40%
Avg Confidence
1
High Threat
103.211.90.190
6/10
Confidence
40%
Reports
4
Location
US
US
136.80.94.55
6/10
Confidence
40%
Reports
4
Location
US
US
136.242.96.62
6/10
Confidence
40%
Reports
6
Location
US
US
154.28.66.62
6/10
Confidence
40%
Reports
6
Location
US
US
216.194.83.125
6/10
Confidence
40%
Reports
4
Location
US
US
158.94.200.4
6/10
Confidence
40%
Reports
6
Location
US
US
128.121.248.127
6/10
Confidence
40%
Reports
6
Location
US
US
94.176.0.133
6/10
Confidence
40%
Reports
6
Location
US
US
185.247.229.217
6/10
Confidence
40%
Reports
6
Location
US
US
187.19.177.40
6/10
Confidence
40%
Reports
2
Location
BR
BR
189.91.183.68
7/10
Confidence
40%
Reports
3
Location
BR
BR
188.212.120.240
6/10
Confidence
40%
Reports
6
Location
US
US
207.45.29.66
6/10
Confidence
40%
Reports
6
Location
US
US
152.39.189.208
6/10
Confidence
40%
Reports
6
Location
US
US
14.102.30.203
6/10
Confidence
40%
Reports
6
Location
US
US