Extreme Threat
IP 176.65.139.217 classified at threat level 10/10 with 8 documented attacks.
Advanced threat indicators confirmed with 45% certainty.
More threatening than 97% of monitored IPs
IP Address
176.65.139.217
IPv4
Public
LU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Luxembourg
Location
Offshore LC
ASN 214472
8
Reports
Honeypot
Data Source
Threat Categories
Hacking
8
SSH
6
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
10. October 2026
Last Activity
10. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 214472) with generally good reputation. The ISP Offshore LC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
45%
Medium Confidence
Confidence History
26. May 2026 - 10. Oct 2026
45%
Current
Stable
Trend
Security Reports (8)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 176.65.139.217
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
LU
- ASN
- AS214472
- ISP
- Offshore LC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 8
- First Reported
- 26 May 2026
- Last Reported
- 10 Oct 2026, 23:23
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 849,593 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
8
avg: 9
=
Network Comparison
Compared against 79 IPs in ASN 214472
Threat Level
10/10
network avg: 9.0
=
Total Reports
8
network avg: 29
--
Geographic Comparison
Compared against 387 IPs in LU
Threat Level
10/10
country avg: 7.0
+
Total Reports
8
country avg: 14
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
10 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Tuesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
8
SSH
6
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
772,197 threat incidents tracked globally • Last 24h: 28,343 Logs
FEED
Top Threat Sources
-
01
United States150,812 19.5% -
02
Brazil112,873 14.6%
-
03
India89,844 11.6%
-
04
China46,577 6%
-
05
SC29,265 3.8%
-
06
Germany18,849 2.4%
-
07
Pakistan18,375 2.4%
-
08
Netherlands18,270 2.4%
-
09
Argentina16,695 2.2%
-
10
Colombia15,360 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
23%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.231
8/10
Confidence
100%
Reports
18
Location
LU
LU
176.65.139.131
10/10
Confidence
49%
Reports
24
Location
LU
LU
176.65.139.135
10/10
Confidence
38%
Reports
3
Location
LU
LU
176.65.139.235
8/10
Confidence
33%
Reports
7
Location
LU
LU
176.65.139.163
8/10
Confidence
32%
Reports
3
Location
LU
LU
176.65.139.248
10/10
Confidence
31%
Reports
18
Location
LU
LU
176.65.139.239
8/10
Confidence
29%
Reports
5
Location
LU
LU
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.36
10/10
Confidence
10%
Reports
99
Location
LU
LU
176.65.139.48
10/10
Confidence
10%
Reports
24
Location
LU
LU
176.65.139.44
8/10
Confidence
9%
Reports
51
Location
LU
LU
176.65.139.99
10/10
Confidence
9%
Reports
34
Location
LU
LU
176.65.139.61
10/10
Confidence
9%
Reports
19
Location
LU
LU
176.65.139.236
8/10
Confidence
9%
Reports
15
Location
LU
LU
176.65.139.195
10/10
Confidence
8%
Reports
12
Location
LU
LU
176.65.139.234
8/10
Confidence
8%
Reports
7
Location
LU
LU
176.65.139.103
10/10
Confidence
7%
Reports
536
Location
LU
LU
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.7/10
Avg Threat
35%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.231
8/10
Confidence
100%
Reports
18
Location
LU
LU
176.65.139.206
8/10
Confidence
94%
Reports
12
Location
DE
DE
176.65.139.150
10/10
Confidence
54%
Reports
5
Location
DE
DE
176.65.139.131
10/10
Confidence
49%
Reports
24
Location
LU
LU
176.65.139.164
10/10
Confidence
47%
Reports
5
Location
DE
DE
176.65.139.135
10/10
Confidence
38%
Reports
3
Location
LU
LU
176.65.139.235
8/10
Confidence
33%
Reports
7
Location
LU
LU
176.65.139.163
8/10
Confidence
32%
Reports
3
Location
LU
LU
176.65.139.248
10/10
Confidence
31%
Reports
18
Location
LU
LU
176.65.139.239
8/10
Confidence
29%
Reports
5
Location
LU
LU
176.65.139.201
7/10
Confidence
28%
Reports
1
Location
DE
DE
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.226
7/10
Confidence
24%
Reports
1
Location
DE
DE
176.65.139.208
7/10
Confidence
23%
Reports
1
Location
DE
DE
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.139
7/10
Confidence
15%
Reports
2
Location
DE
DE
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.140
8/10
Confidence
10%
Reports
266
Location
DE
DE
176.65.139.31
10/10
Confidence
10%
Reports
199
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
59%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.231
8/10
Confidence
100%
Reports
18
ISP
Offshore LC
107.189.2.172
10/10
Confidence
89%
Reports
12
ISP
FranTech Solutions
104.244.72.115
8/10
Confidence
71%
Reports
12
ISP
PONYNET
107.189.28.140
8/10
Confidence
65%
Reports
666
ISP
FranTech Solutions
107.189.8.56
8/10
Confidence
62%
Reports
12
ISP
PONYNET
107.189.31.52
8/10
Confidence
59%
Reports
10
ISP
FranTech Solutions
107.189.10.175
8/10
Confidence
59%
Reports
9
ISP
PONYNET
107.189.29.12
8/10
Confidence
50%
Reports
17
ISP
FranTech Solutions
195.46.234.207
10/10
Confidence
50%
Reports
13
ISP
POST Luxembourg
107.189.30.98
10/10
Confidence
50%
Reports
4
ISP
FranTech Solutions
176.65.139.131
10/10
Confidence
49%
Reports
24
ISP
Offshore LC
107.189.5.121
7/10
Confidence
47%
Reports
8
ISP
FranTech Solutions
107.189.14.87
10/10
Confidence
43%
Reports
67
ISP
FranTech Solutions
88.207.209.14
8/10
Confidence
42%
Reports
41
ISP
POST Luxembourg
107.189.8.181
7/10
Confidence
42%
Reports
12
ISP
PONYNET
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
45%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.126.177.242
8/10
Confidence
45%
Reports
4
Location
SG
SG
2804:34b8:8ed:c301:14cd:719a:df6c:90e8
10/10
Confidence
45%
Reports
3
Location
BR
BR
182.253.143.144
10/10
Confidence
45%
Reports
3
Location
ID
ID
154.163.151.37
10/10
Confidence
45%
Reports
3
Location
GH
GH
2401:4900:8f85:193e:e122:b8c2:ea60:8c4a
10/10
Confidence
45%
Reports
3
Location
IN
IN
110.227.112.142
10/10
Confidence
45%
Reports
3
Location
IN
IN
39.37.172.96
10/10
Confidence
45%
Reports
3
Location
PK
PK
157.15.58.181
10/10
Confidence
45%
Reports
3
Location
NP
NP
216.234.211.53
10/10
Confidence
45%
Reports
3
Location
MZ
MZ
102.253.103.6
10/10
Confidence
45%
Reports
3
Location
ZA
ZA
2401:4900:88fe:cc5:4433:4b7b:915:dadd
10/10
Confidence
45%
Reports
3
Location
IN
IN
2406:7400:104:c4c4:edb5:8917:dc57:61c9
10/10
Confidence
45%
Reports
3
Location
IN
IN
23.234.96.178
8/10
Confidence
45%
Reports
4
Location
US
US
51.161.57.3
8/10
Confidence
45%
Reports
4
Location
CA
CA
45.74.28.189
10/10
Confidence
45%
Reports
3
Location
US
US