Substantial Risk
Threat level 8/10 for 176.65.139.235 based on 7 documented incidents.
Consistent suspicious behavior patterns. 36% confidence rating.
More threatening than 88% of monitored IPs
IP Address
176.65.139.235
IPv4
Public
LU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Luxembourg
Location
Offshore LC
ASN 214472
7
Reports
Mixed
Data Source
Threat Categories
WP Config Exposure
5
Hacking
3
WP Version Scanning
3
WP Plugin Scanning
3
Exploited Host
2
SSH
2
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
10. September 2026
Last Activity
10. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 214472) with generally good reputation. The ISP Offshore LC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
36%
Medium Confidence
Confidence History
4. Jun 2026 - 10. Sep 2026
36%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Exploited Host Hacking | Honeypot x3 | 75% | |
| SSH Exploited Host | Honeypot x2 | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot x2 | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 176.65.139.235
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
LU
- ASN
- AS214472
- ISP
- Offshore LC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 7
- First Reported
- 4 Jun 2026
- Last Reported
- 10 Sep 2026, 19:01
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,725 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
7
avg: 9
-
Network Comparison
Compared against 79 IPs in ASN 214472
Threat Level
8/10
network avg: 9.0
=
Total Reports
7
network avg: 29
--
Geographic Comparison
Compared against 379 IPs in LU
Threat Level
8/10
country avg: 7.0
=
Total Reports
7
country avg: 14
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
10 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Thursday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Config Exposure
5
WP Plugin Scanning
3
WP Version Scanning
3
Hacking
3
Port Scan
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
757,021 threat incidents tracked globally • Last 24h: 29,915 Logs
FEED
Top Threat Sources
-
01
United States148,159 19.6% -
02
Brazil111,851 14.8%
-
03
India87,178 11.5%
-
04
China46,071 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,386 2.4%
-
07
Netherlands17,983 2.4%
-
08
Pakistan17,811 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
21%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.131
10/10
Confidence
53%
Reports
24
Location
LU
LU
176.65.139.231
8/10
Confidence
52%
Reports
7
Location
LU
LU
176.65.139.135
10/10
Confidence
42%
Reports
3
Location
LU
LU
176.65.139.248
10/10
Confidence
34%
Reports
18
Location
LU
LU
176.65.139.163
8/10
Confidence
33%
Reports
3
Location
LU
LU
176.65.139.239
8/10
Confidence
32%
Reports
5
Location
LU
LU
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.36
10/10
Confidence
10%
Reports
99
Location
LU
LU
176.65.139.48
10/10
Confidence
10%
Reports
24
Location
LU
LU
176.65.139.44
8/10
Confidence
9%
Reports
51
Location
LU
LU
176.65.139.99
10/10
Confidence
9%
Reports
34
Location
LU
LU
176.65.139.61
10/10
Confidence
9%
Reports
19
Location
LU
LU
176.65.139.236
8/10
Confidence
9%
Reports
15
Location
LU
LU
176.65.139.195
10/10
Confidence
8%
Reports
12
Location
LU
LU
176.65.139.234
8/10
Confidence
8%
Reports
7
Location
LU
LU
176.65.139.103
10/10
Confidence
7%
Reports
536
Location
LU
LU
176.65.139.229
8/10
Confidence
7%
Reports
5
Location
LU
LU
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.8/10
Avg Threat
32%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.206
8/10
Confidence
87%
Reports
11
Location
DE
DE
176.65.139.150
10/10
Confidence
56%
Reports
5
Location
DE
DE
176.65.139.131
10/10
Confidence
53%
Reports
24
Location
LU
LU
176.65.139.231
8/10
Confidence
52%
Reports
7
Location
LU
LU
176.65.139.164
10/10
Confidence
51%
Reports
5
Location
DE
DE
176.65.139.135
10/10
Confidence
42%
Reports
3
Location
LU
LU
176.65.139.248
10/10
Confidence
34%
Reports
18
Location
LU
LU
176.65.139.163
8/10
Confidence
33%
Reports
3
Location
LU
LU
176.65.139.239
8/10
Confidence
32%
Reports
5
Location
LU
LU
176.65.139.201
7/10
Confidence
30%
Reports
1
Location
DE
DE
176.65.139.226
7/10
Confidence
25%
Reports
1
Location
DE
DE
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.208
7/10
Confidence
23%
Reports
1
Location
DE
DE
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.139
7/10
Confidence
15%
Reports
2
Location
DE
DE
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.140
8/10
Confidence
10%
Reports
266
Location
DE
DE
176.65.139.31
10/10
Confidence
10%
Reports
199
Location
DE
DE
176.65.139.66
10/10
Confidence
10%
Reports
160
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.244.72.115
8/10
Confidence
73%
Reports
12
ISP
PONYNET
107.189.28.140
8/10
Confidence
72%
Reports
666
ISP
FranTech Solutions
107.189.8.56
8/10
Confidence
64%
Reports
12
ISP
PONYNET
107.189.10.175
8/10
Confidence
64%
Reports
9
ISP
PONYNET
195.46.234.207
10/10
Confidence
63%
Reports
13
ISP
POST Luxembourg
107.189.31.52
8/10
Confidence
63%
Reports
10
ISP
FranTech Solutions
176.65.139.131
10/10
Confidence
53%
Reports
24
ISP
Offshore LC
107.189.29.12
8/10
Confidence
52%
Reports
17
ISP
FranTech Solutions
176.65.139.231
8/10
Confidence
52%
Reports
7
ISP
Offshore LC
107.189.5.121
7/10
Confidence
51%
Reports
8
ISP
FranTech Solutions
88.207.209.14
8/10
Confidence
47%
Reports
41
ISP
POST Luxembourg
45.132.195.225
10/10
Confidence
47%
Reports
3
ISP
EstNOC OU
107.189.8.181
7/10
Confidence
46%
Reports
12
ISP
PONYNET
80.90.55.176
10/10
Confidence
45%
Reports
6
ISP
Visual Online S.A.
107.189.14.87
10/10
Confidence
44%
Reports
66
ISP
FranTech Solutions
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
36%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
153.117.53.231
10/10
Confidence
36%
Reports
3
Location
PK
PK
36.74.106.240
10/10
Confidence
36%
Reports
3
Location
ID
ID
178.152.90.253
10/10
Confidence
36%
Reports
3
Location
QA
QA
105.156.83.63
10/10
Confidence
36%
Reports
3
Location
MA
MA
106.222.251.186
10/10
Confidence
36%
Reports
3
Location
IN
IN
2001:4450:49f9:8c00:5951:fcdf:e2ba:38af
10/10
Confidence
36%
Reports
3
Location
PH
PH
2800:810:50d:8e9b:d869:10e0:df81:72f4
10/10
Confidence
36%
Reports
3
Location
AR
AR
122.183.39.209
10/10
Confidence
36%
Reports
3
Location
IN
IN
117.202.107.82
10/10
Confidence
36%
Reports
3
Location
IN
IN
223.181.71.51
10/10
Confidence
36%
Reports
3
Location
IN
IN
152.57.38.221
10/10
Confidence
36%
Reports
3
Location
IN
IN
223.178.86.48
10/10
Confidence
36%
Reports
3
Location
IN
IN
2409:40e4:1305:75d6:34a4:7a82:401a:1352
10/10
Confidence
36%
Reports
3
Location
IN
IN
39.194.2.109
10/10
Confidence
36%
Reports
3
Location
ID
ID
86.181.214.9
10/10
Confidence
36%
Reports
3
Location
GB
GB