Elevated Risk
Elevated threat level 8/10 for IP 194.32.107.172 from 6 reported incidents.
Behavioral profile indicates cyber threat activity with 51% confidence.
More threatening than 89% of monitored IPs
IP Address
194.32.107.172
IPv4
Public
Tor Exit Node
NO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Norway
Location
Gigahost AS
ASN 56655
6
Reports
Mixed
Data Source
Threat Categories
Brute-Force
3
Web App Attack
2
WP Version Scanning
2
WP Plugin Scanning
2
WP Config Exposure
2
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
29. September 2026
Last Activity
29. September 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 56655) with generally good reputation. The ISP Gigahost AS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
49%
Medium Confidence
Confidence History
20. May 2026 - 29. Sep 2026
51%
Current
Stable
Trend
Security Reports (6)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 194.32.107.172
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- Tor Exit Node
- Network Class
- Class C
Geolocation
- Country
-
NO
- ASN
- AS56655
- ISP
- Gigahost AS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 6
- First Reported
- 20 May 2026
- Last Reported
- 29 Sep 2026, 15:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS56655
Gigahost AS
NO
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4
Total IPs Monitored
9
Total Reports
2.3
Reports per IP
Network Context
This IP address belongs to Gigahost AS (AS56655), which manages 4 IP addresses in our monitoring system. Out of these, 9 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 805,760 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
6
avg: 9
-
Network Comparison
Compared against 23 IPs in ASN 56655
Threat Level
8/10
network avg: 7.3
=
Total Reports
6
network avg: 6
=
Network Gigahost AS has overall threat level 2/10
Geographic Comparison
Compared against 765 IPs in NO
Threat Level
8/10
country avg: 6.1
+
Total Reports
6
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Thursday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
3
WP Plugin Scanning
2
WP Version Scanning
2
WP Config Exposure
2
Web App Attack
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
732,819 threat incidents tracked globally • Last 24h: 29,270 Logs
FEED
Top Threat Sources
-
01
United States143,123 19.5% -
02
Brazil110,701 15.1%
-
03
India82,074 11.2%
-
04
China44,710 6.1%
-
05
SC29,233 4%
-
06
Netherlands17,445 2.4%
-
07
Germany17,430 2.4%
-
08
Pakistan16,597 2.3%
-
09
Argentina16,187 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.4/10
Avg Threat
26%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
185.243.218.231
10/10
Confidence
57%
Reports
11
Location
NO
NO
185.181.60.204
10/10
Confidence
55%
Reports
5
Location
NO
NO
185.181.61.201
7/10
Confidence
39%
Reports
13
Location
NO
NO
185.181.61.203
10/10
Confidence
38%
Reports
10
Location
NO
NO
185.125.169.75
10/10
Confidence
38%
Reports
7
Location
NO
NO
185.243.218.230
8/10
Confidence
37%
Reports
7
Location
NO
NO
194.32.107.14
10/10
Confidence
32%
Reports
9
Location
NO
NO
185.14.97.99
7/10
Confidence
32%
Reports
2
Location
NO
NO
185.243.218.229
7/10
Confidence
31%
Reports
7
Location
NO
NO
185.243.218.232
6/10
Confidence
23%
Reports
7
Location
NO
NO
194.32.107.163
0/10
Confidence
23%
Reports
3
Location
NO
NO
195.16.73.11
6/10
Confidence
23%
Reports
1
Location
NO
NO
193.200.229.243
7/10
Confidence
16%
Reports
10
Location
NO
NO
202.50.55.225
7/10
Confidence
16%
Reports
2
Location
NO
NO
185.243.218.226
7/10
Confidence
15%
Reports
7
Location
NO
NO
185.243.218.233
8/10
Confidence
14%
Reports
7
Location
NO
NO
185.243.218.225
7/10
Confidence
13%
Reports
5
Location
NO
NO
193.200.229.96
5/10
Confidence
13%
Reports
1
Location
NO
NO
193.200.221.8
7/10
Confidence
7%
Reports
2
Location
NO
NO
194.32.107.231
8/10
Confidence
4%
Reports
6
Location
NO
NO
IPs from the same subnet range, likely same network segment.
3
Related IPs
6/10
Avg Threat
20%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
69%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.90.12.230
10/10
Confidence
100%
Reports
44
ISP
Globalconnect As
20.251.39.228
8/10
Confidence
100%
Reports
17
ISP
Microsoft Corpo...
213.52.95.15
8/10
Confidence
86%
Reports
8
ISP
Globalconnect As
185.12.59.118
10/10
Confidence
80%
Reports
562
ISP
Blix Solutions AS
87.120.104.29
8/10
Confidence
77%
Reports
10
ISP
Sino Worldwide ...
185.12.59.117
10/10
Confidence
74%
Reports
74
ISP
Blix Solutions AS
128.39.248.197
8/10
Confidence
74%
Reports
7
ISP
Kunnskapssektor...
81.167.26.57
8/10
Confidence
69%
Reports
37
ISP
Lyse Tele
185.243.218.231
10/10
Confidence
57%
Reports
11
ISP
Gigahost AS
82.25.34.123
8/10
Confidence
57%
Reports
7
ISP
Datacamp Limited
185.181.60.204
10/10
Confidence
55%
Reports
5
ISP
Gigahost AS
80.254.37.29
8/10
Confidence
52%
Reports
7
ISP
Telia Norge AS
20.100.175.163
8/10
Confidence
50%
Reports
14
ISP
Microsoft Corpo...
178.232.140.246
10/10
Confidence
50%
Reports
4
ISP
Telia Norge AS
159.253.220.163
8/10
Confidence
48%
Reports
3
ISP
GlobalConnect AB
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
51%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
77.83.39.4
7/10
Confidence
51%
Reports
3,416
Location
DE
DE
185.45.193.187
8/10
Confidence
51%
Reports
848
Location
NL
NL
45.137.194.93
10/10
Confidence
51%
Reports
720
Location
US
US
204.76.203.10
10/10
Confidence
51%
Reports
550
Location
NL
NL
185.176.8.77
8/10
Confidence
51%
Reports
276
Location
ES
ES
185.231.33.38
8/10
Confidence
51%
Reports
229
Location
SC
SC
35.205.166.64
10/10
Confidence
51%
Reports
176
Location
BE
BE
151.243.11.230
10/10
Confidence
51%
Reports
161
Location
AE
AE
152.32.252.65
10/10
Confidence
51%
Reports
148
Location
HK
HK
196.196.253.20
10/10
Confidence
51%
Reports
131
Location
GB
GB
194.163.139.224
8/10
Confidence
51%
Reports
125
Location
FR
FR
170.64.177.80
7/10
Confidence
51%
Reports
121
Location
AU
AU
202.51.202.242
10/10
Confidence
51%
Reports
120
Location
ID
ID
47.253.5.130
10/10
Confidence
51%
Reports
99
Location
US
US
8.142.178.141
8/10
Confidence
51%
Reports
93
Location
CN
CN