Critical Alert
Security alert: 172.86.73.107 rated 10/10 based on 14 verified incidents.
Threat profile indicates sustained malicious activity with 0% confidence rating.
More threatening than 90% of monitored IPs
IP Address
172.86.73.107
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
US
Location
ROUTERHOSTING
ASN 14956
14
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
14
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Reputable Network
This IP is hosted on a network (ASN 14956) with generally good reputation. The ISP ROUTERHOSTING maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
5. Dec 2025 - 6. Dec 2025
0%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 172.86.73.107
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS14956
- ISP
- ROUTERHOSTING
DNS Information
- Reverse DNS
- 107.73.86.172.static.cloudzy.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 14
- First Reported
- 5 Dec 2025
- Last Reported
- 6 Dec 2025, 03:25
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14956
RouterHosting LLC
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
170
Total IPs Monitored
21,290
Total Reports
125.2
Reports per IP
Network Context
This IP address belongs to RouterHosting LLC (AS14956), which manages 170 IP addresses in our monitoring system. Out of these, 21,290 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 809,395 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
14
avg: 9
++
Network Comparison
Compared against 566 IPs in ASN 14956
Threat Level
10/10
network avg: 7.6
+
Total Reports
14
network avg: 48
--
Network ROUTERHOSTING has overall threat level 3/10
Geographic Comparison
Compared against 143,855 IPs in US
Threat Level
10/10
country avg: 6.8
+
Total Reports
14
country avg: 18
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
14
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
736,024 threat incidents tracked globally • Last 24h: 29,059 Logs
FEED
Top Threat Sources
-
01
United States143,855 19.5% -
02
Brazil110,828 15.1%
-
03
India82,703 11.2%
-
04
China44,897 6.1%
-
05
SC29,240 4%
-
06
Germany17,594 2.4%
-
07
Netherlands17,533 2.4%
-
08
Pakistan16,759 2.3%
-
09
Argentina16,196 2.2%
-
10
Colombia15,139 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.3/10
Avg Threat
88%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
144.172.108.80
8/10
Confidence
96%
Reports
12
Location
US
US
45.61.145.5
10/10
Confidence
94%
Reports
39
Location
US
US
144.172.104.147
10/10
Confidence
94%
Reports
30
Location
US
US
2602:fa59:10:c38::1
10/10
Confidence
94%
Reports
11
Location
US
US
216.126.225.6
10/10
Confidence
93%
Reports
24
Location
US
US
172.86.73.137
7/10
Confidence
91%
Reports
180
Location
US
US
216.126.236.85
7/10
Confidence
91%
Reports
97
Location
US
US
144.172.97.249
7/10
Confidence
91%
Reports
56
Location
US
US
144.172.100.157
7/10
Confidence
91%
Reports
38
Location
US
US
144.172.85.75
8/10
Confidence
91%
Reports
11
Location
US
US
172.86.113.38
7/10
Confidence
89%
Reports
261
Location
US
US
144.172.99.12
8/10
Confidence
89%
Reports
21
Location
US
US
144.172.103.203
7/10
Confidence
88%
Reports
117
Location
US
US
107.189.27.179
10/10
Confidence
86%
Reports
85
Location
NL
NL
172.86.66.113
10/10
Confidence
86%
Reports
16
Location
DE
DE
144.172.93.238
8/10
Confidence
84%
Reports
9
Location
US
US
172.86.67.48
8/10
Confidence
83%
Reports
7
Location
DE
DE
107.189.22.128
7/10
Confidence
77%
Reports
133
Location
NL
NL
144.172.117.61
10/10
Confidence
77%
Reports
11
Location
US
US
172.86.89.217
7/10
Confidence
71%
Reports
49
Location
US
US
IPs from the same subnet range, likely same network segment.
3
Related IPs
7.3/10
Avg Threat
36%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
79
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
136.67.210.104
10/10
Confidence
100%
Reports
55
ISP
Google LLC
136.90.20.127
10/10
Confidence
100%
Reports
52
ISP
Google LLC
136.67.214.14
10/10
Confidence
100%
Reports
50
ISP
Google LLC
136.90.24.194
8/10
Confidence
100%
Reports
47
ISP
Google LLC