Elevated Risk
Elevated threat level 8/10 for IP 176.241.66.87 from 74 reported incidents.
Behavioral profile indicates cyber threat activity with 69% confidence.
More threatening than 89% of monitored IPs
IP Address
176.241.66.87
IPv4
Public
JO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Jordan
Location
Vtel Holdings Limited/jor...
ASN 50670
74
Reports
Mixed
Data Source
Threat Categories
Brute-Force
22
Web App Attack
9
WP Login Brute Force
8
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
8. September 2026
Last Activity
7. October 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 50670) with elevated threat levels. The ISP Vtel Holdings Limited/jordan Co. hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
69%
High Confidence
Confidence History
8. Aug 2026 - 7. Oct 2026
69%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force Web App Attack | Community | 75% |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 176.241.66.87
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
JO
- ASN
- AS50670
- ISP
- Vtel Holdings Limited/jordan Co.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 74
- First Reported
- 15 May 2026
- Last Reported
- 7 Oct 2026, 09:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS50670
Vtel Holdings Limited/jordan Co.
JO
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
9
Total Reports
9
Reports per IP
Network Context
This IP address belongs to Vtel Holdings Limited/jordan Co. (AS50670), which manages 1 IP addresses in our monitoring system. Out of these, 9 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,206 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
74
avg: 9
++
Network Comparison
Compared against 16 IPs in ASN 50670
Threat Level
8/10
network avg: 5.7
+
Total Reports
74
network avg: 7
++
Network Vtel Holdings Limited/jordan Co. has overall threat level 8/10
Geographic Comparison
Compared against 2,112 IPs in JO
Threat Level
8/10
country avg: 6.1
+
Total Reports
74
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Sep 2026
4 reports
Daily Average
0.5
reports/day
Most Active
Saturday
15 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
56
WP Login Brute Force
18
Web App Attack
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
756,324 threat incidents tracked globally • Last 24h: 29,126 Logs
FEED
Top Threat Sources
-
01
United States147,961 19.6% -
02
Brazil111,800 14.8%
-
03
India87,106 11.5%
-
04
China46,037 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,344 2.4%
-
07
Netherlands17,967 2.4%
-
08
Pakistan17,783 2.4%
-
09
Argentina16,265 2.2%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
15
Related IPs
5.5/10
Avg Threat
15%
Avg Confidence
2
High Threat
81.21.14.12
8/10
Confidence
50%
Reports
11
Location
JO
JO
176.241.71.149
5/10
Confidence
17%
Reports
2
Location
JO
JO
178.20.189.117
5/10
Confidence
13%
Reports
1
Location
JO
JO
185.193.177.97
5/10
Confidence
13%
Reports
1
Location
JO
JO
81.21.3.217
5/10
Confidence
13%
Reports
1
Location
JO
JO
81.21.10.198
5/10
Confidence
13%
Reports
1
Location
JO
JO
109.237.196.10
5/10
Confidence
13%
Reports
1
Location
JO
JO
185.96.70.217
5/10
Confidence
13%
Reports
1
Location
JO
JO
62.72.191.174
5/10
Confidence
13%
Reports
1
Location
JO
JO
62.72.171.133
5/10
Confidence
13%
Reports
1
Location
JO
JO
109.237.206.198
5/10
Confidence
13%
Reports
1
Location
JO
JO
81.21.8.59
5/10
Confidence
13%
Reports
1
Location
JO
JO
109.237.203.161
5/10
Confidence
13%
Reports
1
Location
JO
JO
81.21.15.217
5/10
Confidence
13%
Reports
1
Location
JO
JO
176.241.64.23
10/10
Confidence
0%
Reports
5
Location
JO
JO
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
75%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.28.181.253
8/10
Confidence
100%
Reports
16
ISP
Jordanian mobil...
46.185.184.85
8/10
Confidence
88%
Reports
30
ISP
Jordan Data Com...
92.241.36.70
10/10
Confidence
84%
Reports
11
ISP
Al Bahrainia al...
94.249.60.61
8/10
Confidence
83%
Reports
10
ISP
Jordan Data Com...
109.107.243.1
8/10
Confidence
77%
Reports
10
ISP
Al Bahrainia al...
213.186.179.6
8/10
Confidence
75%
Reports
49
ISP
Jordan Data Com...
212.118.18.121
10/10
Confidence
73%
Reports
142
ISP
Al Bahrainia al...
212.35.69.83
7/10
Confidence
73%
Reports
35
ISP
Al Bahrainia al...
2a01:9700:4f20:6a00:e171:bb25:7aab:849f
8/10
Confidence
72%
Reports
8
ISP
Jordan Data Com...
213.186.183.40
10/10
Confidence
70%
Reports
104
ISP
Jordan Data Com...
176.28.158.114
8/10
Confidence
68%
Reports
33
ISP
Jordanian mobil...
178.77.182.23
8/10
Confidence
67%
Reports
6
ISP
Al mouakhah lil...
109.107.242.76
10/10
Confidence
64%
Reports
7
ISP
Al Bahrainia al...
89.38.152.33
8/10
Confidence
63%
Reports
6
ISP
Jordanian Exper...
178.77.182.47
8/10
Confidence
63%
Reports
5
ISP
Al mouakhah lil...
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
69%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.22.56.79
10/10
Confidence
69%
Reports
5
Location
SG
SG
165.58.128.242
10/10
Confidence
69%
Reports
8
Location
ZM
ZM
83.217.214.193
8/10
Confidence
69%
Reports
8
Location
RU
RU
129.121.97.74
8/10
Confidence
69%
Reports
7
Location
US
US
181.189.81.244
10/10
Confidence
69%
Reports
5
Location
BR
BR
182.177.78.11
10/10
Confidence
69%
Reports
8
Location
PK
PK
20.194.96.114
7/10
Confidence
69%
Reports
63
Location
KR
KR
159.223.61.249
8/10
Confidence
69%
Reports
5
Location
SG
SG
2001:8f8:1425:3814:e0b8:5a09:98a7:fad4
10/10
Confidence
69%
Reports
5
Location
AE
AE
201.92.207.154
8/10
Confidence
69%
Reports
8
Location
BR
BR
187.0.5.133
8/10
Confidence
69%
Reports
8
Location
BR
BR
20.214.170.255
7/10
Confidence
69%
Reports
44
Location
KR
KR
2603:9001:a200:140c:5456:ec3c:d06d:6e93
10/10
Confidence
69%
Reports
5
Location
US
US
202.155.18.56
8/10
Confidence
69%
Reports
5
Location
ID
ID
109.184.145.128
10/10
Confidence
69%
Reports
9
Location
RU
RU