Critical Alert
Security alert: 176.65.139.248 rated 10/10 based on 18 verified incidents.
Threat profile indicates sustained malicious activity with 34% confidence rating.
More threatening than 96% of monitored IPs
IP Address
176.65.139.248
IPv4
Public
LU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Luxembourg
Location
Offshore LC
ASN 214472
18
Reports
Honeypot
Data Source
Threat Categories
Hacking
17
SSH
7
IoT Targeted
6
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 214472) with generally good reputation. The ISP Offshore LC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
34%
Medium Confidence
Confidence History
29. Jun 2026 - 26. Aug 2026
34%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| IoT Targeted Hacking | Honeypot x2 | 75% | |
| IoT Targeted Hacking | Honeypot x2 | 75% | |
| IoT Targeted Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking IoT Targeted | Honeypot x2 | 75% | |
| IoT Targeted Hacking | Honeypot x2 | 75% | |
| IoT Targeted Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 176.65.139.248
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
LU
- ASN
- AS214472
- ISP
- Offshore LC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 29 Jun 2026
- Last Reported
- 26 Aug 2026, 02:02
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 833,163 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
18
avg: 9
++
Network Comparison
Compared against 79 IPs in ASN 214472
Threat Level
10/10
network avg: 9.0
=
Total Reports
18
network avg: 29
-
Geographic Comparison
Compared against 379 IPs in LU
Threat Level
10/10
country avg: 7.0
+
Total Reports
18
country avg: 14
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
17
SSH
7
IoT Targeted
6
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
757,427 threat incidents tracked globally • Last 24h: 30,605 Logs
FEED
Top Threat Sources
-
01
United States148,250 19.6% -
02
Brazil111,874 14.8%
-
03
India87,197 11.5%
-
04
China46,083 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,439 2.4%
-
07
Netherlands17,997 2.4%
-
08
Pakistan17,824 2.4%
-
09
Argentina16,271 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
21%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.131
10/10
Confidence
53%
Reports
24
Location
LU
LU
176.65.139.231
8/10
Confidence
52%
Reports
7
Location
LU
LU
176.65.139.135
10/10
Confidence
42%
Reports
3
Location
LU
LU
176.65.139.235
8/10
Confidence
36%
Reports
7
Location
LU
LU
176.65.139.163
8/10
Confidence
33%
Reports
3
Location
LU
LU
176.65.139.239
8/10
Confidence
32%
Reports
5
Location
LU
LU
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.36
10/10
Confidence
10%
Reports
99
Location
LU
LU
176.65.139.48
10/10
Confidence
10%
Reports
24
Location
LU
LU
176.65.139.44
8/10
Confidence
9%
Reports
51
Location
LU
LU
176.65.139.99
10/10
Confidence
9%
Reports
34
Location
LU
LU
176.65.139.61
10/10
Confidence
9%
Reports
19
Location
LU
LU
176.65.139.236
8/10
Confidence
9%
Reports
15
Location
LU
LU
176.65.139.195
10/10
Confidence
8%
Reports
12
Location
LU
LU
176.65.139.234
8/10
Confidence
8%
Reports
7
Location
LU
LU
176.65.139.103
10/10
Confidence
7%
Reports
536
Location
LU
LU
176.65.139.229
8/10
Confidence
7%
Reports
5
Location
LU
LU
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.7/10
Avg Threat
32%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.206
8/10
Confidence
87%
Reports
11
Location
DE
DE
176.65.139.150
10/10
Confidence
56%
Reports
5
Location
DE
DE
176.65.139.131
10/10
Confidence
53%
Reports
24
Location
LU
LU
176.65.139.231
8/10
Confidence
52%
Reports
7
Location
LU
LU
176.65.139.164
10/10
Confidence
51%
Reports
5
Location
DE
DE
176.65.139.135
10/10
Confidence
42%
Reports
3
Location
LU
LU
176.65.139.235
8/10
Confidence
36%
Reports
7
Location
LU
LU
176.65.139.163
8/10
Confidence
33%
Reports
3
Location
LU
LU
176.65.139.239
8/10
Confidence
32%
Reports
5
Location
LU
LU
176.65.139.201
7/10
Confidence
30%
Reports
1
Location
DE
DE
176.65.139.226
7/10
Confidence
25%
Reports
1
Location
DE
DE
176.65.139.247
10/10
Confidence
24%
Reports
10
Location
LU
LU
176.65.139.208
7/10
Confidence
23%
Reports
1
Location
DE
DE
176.65.139.232
8/10
Confidence
22%
Reports
10
Location
LU
LU
176.65.139.196
10/10
Confidence
21%
Reports
5
Location
LU
LU
176.65.139.139
7/10
Confidence
15%
Reports
2
Location
DE
DE
176.65.139.181
10/10
Confidence
11%
Reports
614
Location
LU
LU
176.65.139.140
8/10
Confidence
10%
Reports
266
Location
DE
DE
176.65.139.31
10/10
Confidence
10%
Reports
199
Location
DE
DE
176.65.139.66
10/10
Confidence
10%
Reports
160
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.244.72.115
8/10
Confidence
73%
Reports
12
ISP
PONYNET
107.189.28.140
8/10
Confidence
72%
Reports
666
ISP
FranTech Solutions
107.189.8.56
8/10
Confidence
64%
Reports
12
ISP
PONYNET
107.189.10.175
8/10
Confidence
64%
Reports
9
ISP
PONYNET
195.46.234.207
10/10
Confidence
63%
Reports
13
ISP
POST Luxembourg
107.189.31.52
8/10
Confidence
63%
Reports
10
ISP
FranTech Solutions
176.65.139.131
10/10
Confidence
53%
Reports
24
ISP
Offshore LC
107.189.29.12
8/10
Confidence
52%
Reports
17
ISP
FranTech Solutions
176.65.139.231
8/10
Confidence
52%
Reports
7
ISP
Offshore LC
107.189.5.121
7/10
Confidence
51%
Reports
8
ISP
FranTech Solutions
88.207.209.14
8/10
Confidence
47%
Reports
41
ISP
POST Luxembourg
45.132.195.225
10/10
Confidence
47%
Reports
3
ISP
EstNOC OU
107.189.8.181
7/10
Confidence
46%
Reports
12
ISP
PONYNET
80.90.55.176
10/10
Confidence
45%
Reports
6
ISP
Visual Online S.A.
107.189.14.87
10/10
Confidence
44%
Reports
66
ISP
FranTech Solutions
IPs with similar threat level and confidence scores.
15
Related IPs
7.2/10
Avg Threat
34%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
34.69.8.154
7/10
Confidence
34%
Reports
3
Location
US
US
35.189.190.9
7/10
Confidence
34%
Reports
3
Location
TW
TW
34.138.134.5
7/10
Confidence
34%
Reports
3
Location
US
US
35.205.128.46
7/10
Confidence
34%
Reports
3
Location
BE
BE
34.146.36.53
7/10
Confidence
34%
Reports
3
Location
JP
JP
34.179.138.99
7/10
Confidence
34%
Reports
3
Location
DE
DE
89.244.95.94
6/10
Confidence
34%
Reports
3
Location
DE
DE
165.227.165.212
7/10
Confidence
34%
Reports
3
Location
DE
DE
35.213.91.143
7/10
Confidence
34%
Reports
3
Location
JP
JP
102.91.133.33
7/10
Confidence
34%
Reports
3
Location
NG
NG
2804:14d:b083:88b3:d87d:e860:cbf5:dc84
8/10
Confidence
34%
Reports
3
Location
BR
BR
109.224.242.232
8/10
Confidence
34%
Reports
3
Location
TR
TR
104.234.32.40
7/10
Confidence
34%
Reports
3
Location
US
US
103.252.216.202
8/10
Confidence
34%
Reports
3
Location
IN
IN
2401:4900:8f84:a5c7:319d:baed:e8b5:432a
8/10
Confidence
34%
Reports
3
Location
IN
IN