Substantial Risk
Threat level 8/10 for 185.56.65.172 based on 14 documented incidents.
Consistent suspicious behavior patterns. 77% confidence rating.
More threatening than 93% of monitored IPs
IP Address
185.56.65.172
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
United States
Location
Take-Two Interactive Soft...
ASN 202021
14
Reports
Honeypot
Data Source
Threat Categories
IoT Targeted
10
Fraud VoIP
4
Technical Details
IoT-targeted attacks exploit weak security in smart devices, cameras, routers, and other connected devices.
Recommended Mitigations
Segment IoT networks, update device firmware, change default credentials, and disable UPnP.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
22. October 2026
Last Activity
10. November 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 202021) with generally good reputation. The ISP Take-Two Interactive Software, Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
77%
Verified
Confidence History
29. Jul 2026 - 10. Nov 2026
77%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.56.65.172
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS202021
- ISP
- Take-Two Interactive Software, Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 29 Jul 2026
- Last Reported
- 10 Nov 2026, 11:28
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,352,021 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
14
avg: 7
++
Network Comparison
Compared against 10 IPs in ASN 202021
Threat Level
8/10
network avg: 8.1
=
Total Reports
14
network avg: 4
++
Geographic Comparison
Compared against 213,607 IPs in US
Threat Level
8/10
country avg: 6.6
+
Total Reports
14
country avg: 16
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Oct 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Wednesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
IoT Targeted
10
Fraud VoIP
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
1,232,363 threat incidents tracked globally • Last 24h: 20,583 Logs
FEED
Top Threat Sources
-
01
Brazil261,723 21.2% -
02
United States213,624 17.3%
-
03
India104,161 8.5% -
04
China52,537 4.3% -
05
Argentina42,607 3.5% -
06
SC29,487 2.4% -
07
Mexico28,150 2.3% -
08
Russia27,412 2.2% -
09
Germany25,867 2.1% -
10
Colombia24,360 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
9
Related IPs
8.1/10
Avg Threat
28%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
185.56.65.171
8/10
Confidence
49%
Reports
5
Location
US
US
185.56.65.169
8/10
Confidence
43%
Reports
5
Location
US
US
185.56.65.168
8/10
Confidence
43%
Reports
4
Location
US
US
185.56.65.170
8/10
Confidence
41%
Reports
3
Location
US
US
185.56.65.167
10/10
Confidence
35%
Reports
6
Location
US
US
185.56.66.35
7/10
Confidence
14%
Reports
1
Location
US
US
185.56.66.33
10/10
Confidence
10%
Reports
3
Location
US
US
185.56.66.36
7/10
Confidence
8%
Reports
2
Location
US
US
185.56.66.34
7/10
Confidence
5%
Reports
1
Location
US
US
IPs from the same subnet range, likely same network segment.
5
Related IPs
8.4/10
Avg Threat
42%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.28.201.73
8/10
Confidence
100%
Reports
65
ISP
Cloudflare, Inc.
77.239.124.175
8/10
Confidence
100%
Reports
38
ISP
Banatsync Srl
104.28.196.78
8/10
Confidence
100%
Reports
36
ISP
Cloudflare, Inc.
66.132.159.130
7/10
Confidence
100%
Reports
27
ISP
Censys, Inc.
34.23.185.185
10/10
Confidence
100%
Reports
20
ISP
Google LLC
77.239.124.77
10/10
Confidence
100%
Reports
20
ISP
Banatsync Srl
77.239.124.64
10/10
Confidence
100%
Reports
19
ISP
Banatsync Srl
195.210.105.149
8/10
Confidence
100%
Reports
16
ISP
GSL Networks Pt...
144.172.118.88
10/10
Confidence
100%
Reports
16
ISP
RouterHosting LLC
66.132.195.211
8/10
Confidence
100%
Reports
15
ISP
Censys, Inc.
193.122.153.190
8/10
Confidence
100%
Reports
14
ISP
Oracle Corporation
195.210.105.110
8/10
Confidence
100%
Reports
14
ISP
GSL Networks Pt...
195.210.105.224
7/10
Confidence
100%
Reports
14
ISP
GSL Networks Pt...
104.28.201.155
8/10
Confidence
100%
Reports
14
ISP
Cloudflare, Inc.
77.239.124.68
10/10
Confidence
100%
Reports
13
ISP
Banatsync Srl
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
77%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
123.1.168.201
10/10
Confidence
77%
Reports
8
Location
HK
HK
172.98.32.159
10/10
Confidence
77%
Reports
7
Location
US
US
35.237.234.223
10/10
Confidence
77%
Reports
9
Location
US
US
103.134.131.42
10/10
Confidence
77%
Reports
11
Location
IN
IN
158.140.180.22
10/10
Confidence
77%
Reports
12
Location
ID
ID
103.26.94.164
10/10
Confidence
77%
Reports
45
Location
HK
HK
34.104.204.170
10/10
Confidence
77%
Reports
18
Location
JP
JP
34.13.142.72
10/10
Confidence
77%
Reports
19
Location
NL
NL
34.180.109.195
10/10
Confidence
77%
Reports
37
Location
JP
JP
151.95.23.125
10/10
Confidence
77%
Reports
13
Location
IT
IT
154.68.65.222
10/10
Confidence
77%
Reports
9
Location
RW
RW
154.219.124.231
10/10
Confidence
77%
Reports
12
Location
HK
HK
34.87.160.34
10/10
Confidence
77%
Reports
40
Location
SG
SG
172.67.72.24
10/10
Confidence
77%
Reports
16
176.123.4.110
10/10
Confidence
77%
Reports
13
Location
MD
MD