Skip to main content Skip to footer

IP Address

185.27.166.89

IPv4 Public

SE

AS48803

Mediateknik i Varberg AB

7 Reports

Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Sweden Location

Mediateknik i Varberg AB ASN 48803

7 Reports

Honeypot Data Source

Critical Alert

Security alert: 185.27.166.89 rated 10/10 based on 7 verified incidents.

Threat profile indicates sustained malicious activity with 63% confidence rating.

More threatening than 99% of monitored IPs

Threat Categories

IoT Targeted 7

Technical Details

IoT-targeted attacks exploit weak security in smart devices, cameras, routers, and other connected devices.

Recommended Mitigations

Segment IoT networks, update device firmware, change default credentials, and disable UPnP.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over less than a day indicates persistent threat actor operations.

First Observed 25. October 2026

Last Activity 25. October 2026

Recent (7 days) 7 incidents

Reputable Network

This IP is hosted on a network (ASN 48803) with generally good reputation. The ISP Mediateknik i Varberg AB maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement immediate countermeasures. Well-resourced threat actor identified.

Long-term blocking recommended.

Reputation Summary

Threat Level 10/10 Critical

Critical

Activity Frequency 2/10 Very Low

Confidence Score 63% High Confidence

Confidence History

25. Oct 2026

63% Current

Stable Trend

Date	Categories	Source	Confidence
25. Oct 2026	IoT Targeted	Honeypot	75%
25. Oct 2026	IoT Targeted	Honeypot	75%
25. Oct 2026	IoT Targeted	Honeypot	75%
25. Oct 2026	IoT Targeted	Honeypot	75%
25. Oct 2026	IoT Targeted	Honeypot	75%
25. Oct 2026	IoT Targeted	Honeypot	75%
25. Oct 2026	IoT Targeted	Honeypot	75%

Basic Information

IP Address: 185.27.166.89
IP Version: IPv4
Network Type: Public
Tor Network: No
Network Class: Class B

Geolocation

Country: SE
ASN: AS48803
ISP: Mediateknik i Varberg AB

DNS Information

Reverse DNS: host166-89.customer.mediateknik.net
PTR Record: Yes
Connection Type: Static

Statistics

Total Reports: 7
First Reported: 27 Oct 2026
Last Reported: 25 Oct 2026, 22:56

Comparative Analysis

How this IP compares to others in our threat intelligence database

99 %

Global Threat Ranking

This IP is more threatening than 99% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 1,279,019 reported IPs worldwide

Threat Level 10/10 avg: 6.0 ++

Total Reports 7 avg: 7 =

Geographic Comparison

Compared against 4,334 IPs in SE

Threat Level 10/10 country avg: 6.1 ++

Total Reports 7 country avg: 9 -

Daily report activity over the last 30 days showing patterns and peaks.

Peak Day 25 Oct 2026 7 reports

Daily Average 0.2 reports/day

Most Active Sunday 7 reports

Evolution of threat level over time based on reported categories and frequency.

Initial Threat 6/10

Current Threat 6/10

Distribution of threat categories reported over time.

Top Threat Categories

IoT Targeted 7

Activity patterns showing when this IP is most active during the day and week.

Hourly Activity

Peak activity at 22:00 with 7 reports

Weekly Activity

Geographic Threat Distribution

1,165,688 threat incidents tracked globally • Last 24h: 31,488 Logs

FEED

Top Threat Sources

01

Brazil BR

258,039 22.1%
02

United States US

198,066 17%
03

India IN

101,046 8.7%
04

China CN

49,194 4.2%
05

Argentina AR

41,759 3.6%
06

SC SC

29,389 2.5%
07

Mexico MX

27,238 2.3%
08

Russia RU

26,172 2.2%
09

Colombia CO

23,960 2.1%
10

Germany DE

22,349 1.9%

+40 more countries

THREAT LEVEL

LOW MED HIGH

IPs from the same country with similar threat profiles.

15 Related IPs

9.5/10 Avg Threat

89% Avg Confidence

15 High Threat

High-risk network: Majority of related IPs are flagged

Confidence 100%

ISP Microsoft Corpo...

ISP Aeza Group LLC

ISP Amazon.com, Inc.

ISP The Constant Co...

ISP Amazon.com, Inc.

ISP Tele2 SWIPnet

ISP Telia Company AB

ISP Telenor Sverige AB

ISP Patrik Lagerman

ISP Datacamp Limited

IPs with similar threat level and confidence scores.

15 Related IPs

10/10 Avg Threat

63% Avg Confidence

15 High Threat

High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "185.27.166.89",
    "threat_level": 10,
    "confidence_score": 63,
    "total_reports": 7,
    "country_code": "SE",
    "isp_name": "Mediateknik i Varberg AB",
    "asn": "48803",
    "first_reported": "2026-10-27 06:29:12",
    "last_reported": "2026-10-25 22:56:58",
    "exported_at": "2026-10-27T08:03:36+01:00",
    "source": "https://reportedip.com/ip/185.27.166.89/"
}

Firewall Rules

Ready-to-use blocking rules for common firewall systems.

iptables / netfilter

iptables -A INPUT -s 185.27.166.89 -j DROP
iptables -A OUTPUT -d 185.27.166.89 -j DROP

UFW (Ubuntu)

ufw deny from 185.27.166.89
ufw deny to 185.27.166.89

Windows Firewall

netsh advfirewall firewall add rule name="Block 185.27.166.89" dir=in action=block remoteip=185.27.166.89
netsh advfirewall firewall add rule name="Block 185.27.166.89 Out" dir=out action=block remoteip=185.27.166.89

Cloudflare

# Cloudflare Firewall Rule (IP Access Rules)
# Action: Block
# IP Address: 185.27.166.89

nginx

# Add to server block or location
deny 185.27.166.89;

Apache .htaccess

# Add to .htaccess or Apache config
<RequireAll>
    Require all granted
    Require not ip 185.27.166.89
</RequireAll>

Analyzed high-risk IP addresses