Extreme Threat
IP 190.128.201.18 classified at threat level 10/10 with 20 documented attacks.
Advanced threat indicators confirmed with 89% certainty.
More threatening than 98% of monitored IPs
IP Address
190.128.201.18
IPv4
Public
PY
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
PY
Location
Telecel S.A.
ASN 23201
20
Reports
Honeypot
Data Source
Threat Categories
SSH
18
Hacking
9
Exploited Host
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
11. July 2026
Last Activity
11. July 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 23201) with generally good reputation. The ISP Telecel S.A. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
74%
High Confidence
Confidence History
22. Apr 2026 - 11. Jul 2026
89%
Current
Stable
Trend
Security Reports (20)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 190.128.201.18
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
PY
- ASN
- AS23201
- ISP
- Telecel S.A.
DNS Information
- Reverse DNS
- static-18-201-128-190.telecel.com.py
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 20
- First Reported
- 22 Apr 2026
- Last Reported
- 11 Jul 2026, 20:10
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS23201
Telecel S.A.
PY
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
14
Total IPs Monitored
139
Total Reports
9.9
Reports per IP
Network Context
This IP address belongs to Telecel S.A. (AS23201), which manages 14 IP addresses in our monitoring system. Out of these, 139 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 312,513 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
20
avg: 18
=
Network Comparison
Compared against 27 IPs in ASN 23201
Threat Level
10/10
network avg: 7.2
+
Total Reports
20
network avg: 8
++
Network Telecel S.A. has overall threat level 1/10
Geographic Comparison
Compared against 138 IPs in PY
Threat Level
10/10
country avg: 6.4
++
Total Reports
20
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 Jul 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Sunday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
18
Hacking
9
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.9/10
Avg Threat
54%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
181.123.136.11
10/10
Confidence
88%
Reports
10
Location
PY
PY
181.40.78.9
10/10
Confidence
87%
Reports
35
Location
PY
PY
181.124.146.152
10/10
Confidence
86%
Reports
16
Location
PY
PY
181.124.62.110
10/10
Confidence
77%
Reports
17
Location
PY
PY
190.128.241.2
8/10
Confidence
77%
Reports
11
Location
PY
PY
190.128.233.242
10/10
Confidence
74%
Reports
33
Location
PY
PY
186.16.13.27
10/10
Confidence
62%
Reports
9
Location
PY
PY
181.123.62.210
10/10
Confidence
62%
Reports
5
Location
PY
PY
181.121.216.228
10/10
Confidence
59%
Reports
31
Location
PY
PY
181.122.43.177
8/10
Confidence
59%
Reports
7
Location
PY
PY
181.120.140.106
10/10
Confidence
49%
Reports
6
Location
PY
PY
181.127.25.95
7/10
Confidence
40%
Reports
2
Location
PY
PY
181.127.136.11
10/10
Confidence
38%
Reports
3
Location
PY
PY
181.121.20.113
7/10
Confidence
36%
Reports
2
Location
PY
PY
181.122.58.31
7/10
Confidence
30%
Reports
4
Location
PY
PY
181.123.206.116
0/10
Confidence
30%
Reports
2
Location
PY
PY
181.40.108.139
0/10
Confidence
30%
Reports
1
Location
PY
PY
186.17.152.66
7/10
Confidence
30%
Reports
1
Location
PY
PY
181.127.80.239
7/10
Confidence
30%
Reports
1
Location
PY
PY
190.128.180.246
7/10
Confidence
30%
Reports
1
Location
PY
PY
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
132.255.164.117
8/10
Confidence
100%
Reports
51
ISP
SOL TELECOMUNIC...
143.202.209.172
10/10
Confidence
98%
Reports
45
ISP
RED PARAGUAYA D...
181.103.1.206
8/10
Confidence
98%
Reports
21
ISP
Nucleo S.A.
45.184.158.18
10/10
Confidence
98%
Reports
15
ISP
GRUPO SPEED NET...
143.255.141.221
10/10
Confidence
97%
Reports
18
ISP
GIG@NET SOCIEDA...
135.136.15.144
8/10
Confidence
93%
Reports
17
ISP
M247 Europe SRL
143.202.209.23
10/10
Confidence
91%
Reports
12
ISP
RED PARAGUAYA D...
186.123.7.48
10/10
Confidence
88%
Reports
27
ISP
Techtel LMDS Co...
181.123.136.11
10/10
Confidence
88%
Reports
10
ISP
Telecel S.A.
181.40.78.9
10/10
Confidence
87%
Reports
35
ISP
Telecel S.A.
38.52.135.50
10/10
Confidence
87%
Reports
8
ISP
GIG@NET SOCIEDA...
201.217.12.57
10/10
Confidence
86%
Reports
62
ISP
COMPANIA PARAGU...
181.124.146.152
10/10
Confidence
86%
Reports
16
ISP
Telecel S.A.
181.103.2.67
10/10
Confidence
84%
Reports
7
ISP
Nucleo S.A.
181.94.226.224
10/10
Confidence
83%
Reports
35
ISP
Nucleo S.A.
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
66.132.172.175
10/10
Confidence
89%
Reports
5,798
Location
US
US
66.132.172.160
8/10
Confidence
89%
Reports
5,745
Location
US
US
66.132.172.172
10/10
Confidence
89%
Reports
5,707
Location
US
US
66.132.172.161
10/10
Confidence
89%
Reports
5,691
Location
US
US
66.132.172.173
8/10
Confidence
89%
Reports
5,669
Location
US
US
66.132.172.174
10/10
Confidence
89%
Reports
5,666
Location
US
US
66.132.172.168
10/10
Confidence
89%
Reports
5,651
Location
US
US
66.132.172.170
10/10
Confidence
89%
Reports
5,600
Location
US
US
66.132.172.166
10/10
Confidence
89%
Reports
5,599
Location
US
US
66.132.172.169
10/10
Confidence
89%
Reports
5,572
Location
US
US
66.132.172.163
10/10
Confidence
89%
Reports
5,554
Location
US
US
80.66.83.80
10/10
Confidence
89%
Reports
1,939
Location
RU
RU
3.134.216.108
8/10
Confidence
89%
Reports
924
Location
US
US
207.90.244.19
8/10
Confidence
89%
Reports
701
Location
US
US
45.82.78.107
10/10
Confidence
89%
Reports
638
Location
DE
DE