Significant Threat
IP 176.65.139.231 identified as significant threat (8/10) from 7 events.
Multiple malicious indicators detected. Confidence level: 53%.
More threatening than 89% of monitored IPs
IP Address
176.65.139.231
IPv4
Public
LU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Luxembourg
Location
Offshore LC
ASN 214472
7
Reports
Mixed
Data Source
Threat Categories
WP Config Exposure
6
Hacking
4
Port Scan
3
WP Version Scanning
3
WP Plugin Scanning
3
Exploited Host
1
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
6. October 2026
Last Activity
6. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 214472) with generally good reputation. The ISP Offshore LC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
52%
High Confidence
Confidence History
30. May 2026 - 6. Oct 2026
53%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Exploited Host Web App Attack | Honeypot x3 | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot x5 | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 176.65.139.231
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
LU
- ASN
- AS214472
- ISP
- Offshore LC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 7
- First Reported
- 30 May 2026
- Last Reported
- 6 Oct 2026, 09:44
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,391 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
7
avg: 9
-
Network Comparison
Compared against 79 IPs in ASN 214472
Threat Level
8/10
network avg: 9.0
=
Total Reports
7
network avg: 29
--
Geographic Comparison
Compared against 378 IPs in LU
Threat Level
8/10
country avg: 7.0
=
Total Reports
7
country avg: 14
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Monday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Config Exposure
6
Hacking
4
WP Plugin Scanning
3
WP Version Scanning
3
Port Scan
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
756,711 threat incidents tracked globally • Last 24h: 29,326 Logs
FEED
Top Threat Sources
-
01
United States148,093 19.6% -
02
Brazil111,821 14.8%
-
03
India87,156 11.5%
-
04
China46,051 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,360 2.4%
-
07
Netherlands17,975 2.4%
-
08
Pakistan17,801 2.4%
-
09
Argentina16,265 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
20%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.131
10/10
Confidence
53%
Reports
24
Location
LU
LU
176.65.139.135
10/10
Confidence
42%
Reports
3
Location
LU
LU
176.65.139.235
8/10
Confidence
36%
Reports
7
Location
LU
LU
176.65.139.248
10/10
Confidence
34%
Reports
18
Location
LU
LU
176.65.139.163
8/10
Confidence
33%
Reports
3
Location
LU
LU
176.65.139.239
8/10
Confidence
32%
Reports
5
Location
LU
LU
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.36
10/10
Confidence
10%
Reports
99
Location
LU
LU
176.65.139.48
10/10
Confidence
10%
Reports
24
Location
LU
LU
176.65.139.44
8/10
Confidence
9%
Reports
51
Location
LU
LU
176.65.139.99
10/10
Confidence
9%
Reports
34
Location
LU
LU
176.65.139.61
10/10
Confidence
9%
Reports
19
Location
LU
LU
176.65.139.236
8/10
Confidence
9%
Reports
15
Location
LU
LU
176.65.139.195
10/10
Confidence
8%
Reports
12
Location
LU
LU
176.65.139.234
8/10
Confidence
8%
Reports
7
Location
LU
LU
176.65.139.103
10/10
Confidence
7%
Reports
536
Location
LU
LU
176.65.139.229
8/10
Confidence
7%
Reports
5
Location
LU
LU
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.8/10
Avg Threat
31%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.206
8/10
Confidence
87%
Reports
11
Location
DE
DE
176.65.139.150
10/10
Confidence
56%
Reports
5
Location
DE
DE
176.65.139.131
10/10
Confidence
53%
Reports
24
Location
LU
LU
176.65.139.164
10/10
Confidence
51%
Reports
5
Location
DE
DE
176.65.139.135
10/10
Confidence
42%
Reports
3
Location
LU
LU
176.65.139.235
8/10
Confidence
36%
Reports
7
Location
LU
LU
176.65.139.248
10/10
Confidence
34%
Reports
18
Location
LU
LU
176.65.139.163
8/10
Confidence
33%
Reports
3
Location
LU
LU
176.65.139.239
8/10
Confidence
32%
Reports
5
Location
LU
LU
176.65.139.201
7/10
Confidence
30%
Reports
1
Location
DE
DE
176.65.139.226
7/10
Confidence
26%
Reports
1
Location
DE
DE
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.208
7/10
Confidence
23%
Reports
1
Location
DE
DE
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.139
7/10
Confidence
15%
Reports
2
Location
DE
DE
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.140
8/10
Confidence
10%
Reports
266
Location
DE
DE
176.65.139.31
10/10
Confidence
10%
Reports
199
Location
DE
DE
176.65.139.66
10/10
Confidence
10%
Reports
160
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.244.72.115
8/10
Confidence
77%
Reports
12
ISP
PONYNET
107.189.28.140
8/10
Confidence
72%
Reports
666
ISP
FranTech Solutions
107.189.8.56
8/10
Confidence
64%
Reports
12
ISP
PONYNET
107.189.10.175
8/10
Confidence
64%
Reports
9
ISP
PONYNET
195.46.234.207
10/10
Confidence
63%
Reports
13
ISP
POST Luxembourg
107.189.31.52
8/10
Confidence
63%
Reports
10
ISP
FranTech Solutions
176.65.139.131
10/10
Confidence
53%
Reports
24
ISP
Offshore LC
107.189.29.12
8/10
Confidence
53%
Reports
17
ISP
FranTech Solutions
107.189.5.121
7/10
Confidence
51%
Reports
8
ISP
FranTech Solutions
88.207.209.14
8/10
Confidence
47%
Reports
41
ISP
POST Luxembourg
45.132.195.225
10/10
Confidence
47%
Reports
3
ISP
EstNOC OU
107.189.8.181
7/10
Confidence
46%
Reports
12
ISP
PONYNET
107.189.14.87
10/10
Confidence
45%
Reports
66
ISP
FranTech Solutions
80.90.55.176
10/10
Confidence
45%
Reports
6
ISP
Visual Online S.A.
107.189.7.141
7/10
Confidence
44%
Reports
8
ISP
PONYNET
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
53%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2605:59c1:1b3f:6110:485f:eb0b:f24d:3538
10/10
Confidence
53%
Reports
3
Location
NG
NG
34.39.139.224
8/10
Confidence
53%
Reports
3
Location
BR
BR
8.231.179.101
8/10
Confidence
53%
Reports
3
Location
US
US
34.104.196.35
10/10
Confidence
53%
Reports
3
Location
JP
JP
105.235.133.212
10/10
Confidence
53%
Reports
3
Location
DZ
DZ
106.0.40.32
10/10
Confidence
53%
Reports
3
Location
IN
IN
20.213.164.192
7/10
Confidence
53%
Reports
15
Location
AU
AU
36.80.182.167
10/10
Confidence
53%
Reports
3
Location
ID
ID
196.151.43.6
10/10
Confidence
53%
Reports
3
Location
EG
EG
38.255.63.92
10/10
Confidence
53%
Reports
3
Location
US
US
222.127.189.152
10/10
Confidence
53%
Reports
3
Location
PH
PH
2409:40e0:100f:64e4:249d:f8d4:a1d2:d9d
10/10
Confidence
53%
Reports
3
Location
IN
IN
3.95.6.178
8/10
Confidence
53%
Reports
3
Location
US
US
43.156.253.213
10/10
Confidence
53%
Reports
4
Location
SG
SG
2a01:9700:40fc:3701:792c:1d8f:da5:48ed
10/10
Confidence
53%
Reports
4
Location
JO
JO