Elevated Risk
Elevated threat level 7/10 for IP 185.181.61.201 from 13 reported incidents.
Behavioral profile indicates cyber threat activity with 38% confidence.
More threatening than 84% of monitored IPs
IP Address
185.181.61.201
IPv4
Public
NO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Norway
Location
Gigahost AS
ASN 56655
13
Reports
Mixed
Data Source
Threat Categories
Brute-Force
8
Hacking
4
WP User Enumeration
1
Web Spam
1
Blog Spam
1
Port Scan
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
3. September 2026
Last Activity
14. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 56655) with generally good reputation. The ISP Gigahost AS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
38%
Medium Confidence
Confidence History
14. May 2026 - 14. Sep 2026
38%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking | Community | 75% | |
| Brute-Force | Community | 75% | |
| Bad Web Bot WP Fake SEO Bot Web Spam +5 | Honeypot x4 | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.181.61.201
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
NO
- ASN
- AS56655
- ISP
- Gigahost AS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 13
- First Reported
- 14 May 2026
- Last Reported
- 14 Sep 2026, 13:06
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS56655
Gigahost AS
NO
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4
Total IPs Monitored
9
Total Reports
2.3
Reports per IP
Network Context
This IP address belongs to Gigahost AS (AS56655), which manages 4 IP addresses in our monitoring system. Out of these, 9 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 807,859 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
13
avg: 9
+
Network Comparison
Compared against 23 IPs in ASN 56655
Threat Level
7/10
network avg: 7.3
=
Total Reports
13
network avg: 6
++
Network Gigahost AS has overall threat level 2/10
Geographic Comparison
Compared against 767 IPs in NO
Threat Level
7/10
country avg: 6.1
+
Total Reports
13
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Sep 2026
1 reports
Daily Average
0.2
reports/day
Most Active
Monday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
8
Hacking
4
Bad Web Bot
1
WP Fake SEO Bot
1
Web Spam
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
734,696 threat incidents tracked globally • Last 24h: 27,819 Logs
FEED
Top Threat Sources
-
01
United States143,597 19.5% -
02
Brazil110,790 15.1%
-
03
India82,344 11.2%
-
04
China44,821 6.1%
-
05
SC29,236 4%
-
06
Germany17,536 2.4%
-
07
Netherlands17,499 2.4%
-
08
Pakistan16,694 2.3%
-
09
Argentina16,193 2.2%
-
10
Colombia15,136 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.3/10
Avg Threat
27%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
185.181.60.204
10/10
Confidence
59%
Reports
6
Location
NO
NO
185.243.218.231
10/10
Confidence
57%
Reports
11
Location
NO
NO
194.32.107.172
8/10
Confidence
49%
Reports
6
Location
NO
NO
185.181.61.203
8/10
Confidence
42%
Reports
11
Location
NO
NO
185.243.218.230
8/10
Confidence
42%
Reports
8
Location
NO
NO
185.125.169.75
10/10
Confidence
37%
Reports
7
Location
NO
NO
185.14.97.99
7/10
Confidence
32%
Reports
2
Location
NO
NO
194.32.107.14
10/10
Confidence
31%
Reports
9
Location
NO
NO
185.243.218.229
7/10
Confidence
31%
Reports
7
Location
NO
NO
185.243.218.232
6/10
Confidence
23%
Reports
7
Location
NO
NO
194.32.107.163
0/10
Confidence
23%
Reports
3
Location
NO
NO
195.16.73.11
6/10
Confidence
23%
Reports
1
Location
NO
NO
193.200.229.243
7/10
Confidence
16%
Reports
10
Location
NO
NO
202.50.55.225
7/10
Confidence
16%
Reports
2
Location
NO
NO
185.243.218.226
7/10
Confidence
15%
Reports
7
Location
NO
NO
185.243.218.233
8/10
Confidence
14%
Reports
7
Location
NO
NO
185.243.218.225
7/10
Confidence
13%
Reports
5
Location
NO
NO
193.200.229.96
5/10
Confidence
13%
Reports
1
Location
NO
NO
193.200.221.8
7/10
Confidence
7%
Reports
2
Location
NO
NO
194.32.107.231
8/10
Confidence
4%
Reports
6
Location
NO
NO
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
42%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
69%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.90.12.230
10/10
Confidence
100%
Reports
44
ISP
Globalconnect As
20.251.39.228
8/10
Confidence
100%
Reports
17
ISP
Microsoft Corpo...
213.52.95.15
8/10
Confidence
88%
Reports
9
ISP
Globalconnect As
185.12.59.118
10/10
Confidence
80%
Reports
565
ISP
Blix Solutions AS
87.120.104.29
8/10
Confidence
80%
Reports
11
ISP
Sino Worldwide ...
185.12.59.117
10/10
Confidence
74%
Reports
74
ISP
Blix Solutions AS
128.39.248.197
8/10
Confidence
74%
Reports
7
ISP
Kunnskapssektor...
81.167.26.57
8/10
Confidence
68%
Reports
37
ISP
Lyse Tele
185.181.60.204
10/10
Confidence
59%
Reports
6
ISP
Gigahost AS
185.243.218.231
10/10
Confidence
57%
Reports
11
ISP
Gigahost AS
82.25.34.123
8/10
Confidence
56%
Reports
7
ISP
Datacamp Limited
80.254.37.29
8/10
Confidence
51%
Reports
7
ISP
Telia Norge AS
194.32.107.172
8/10
Confidence
49%
Reports
6
ISP
Gigahost AS
20.100.175.163
8/10
Confidence
48%
Reports
14
ISP
Microsoft Corpo...
178.232.140.246
10/10
Confidence
48%
Reports
4
ISP
Telia Norge AS
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
38%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.231
10/10
Confidence
38%
Reports
1,051
Location
TW
TW
213.209.159.242
10/10
Confidence
38%
Reports
960
Location
TW
TW
192.253.248.226
10/10
Confidence
38%
Reports
842
Location
IR
IR
176.65.148.25
10/10
Confidence
38%
Reports
376
Location
NL
NL
158.94.211.103
7/10
Confidence
38%
Reports
328
Location
US
US
59.24.133.197
10/10
Confidence
38%
Reports
316
Location
KR
KR
76.35.205.38
10/10
Confidence
38%
Reports
269
Location
US
US
45.142.193.149
10/10
Confidence
38%
Reports
261
Location
RO
RO
101.184.191.1
10/10
Confidence
38%
Reports
256
Location
AU
AU
99.109.64.87
10/10
Confidence
38%
Reports
256
Location
US
US
76.170.82.151
10/10
Confidence
38%
Reports
252
Location
US
US
45.194.67.26
10/10
Confidence
38%
Reports
217
Location
US
US
176.65.149.201
10/10
Confidence
38%
Reports
131
Location
NL
NL
43.230.201.87
8/10
Confidence
38%
Reports
127
Location
IN
IN
104.234.208.2
8/10
Confidence
38%
Reports
121
Location
US
US