Substantial Risk
Threat level 8/10 for 196.251.121.150 based on 68 documented incidents.
Consistent suspicious behavior patterns. 72% confidence rating.
More threatening than 89% of monitored IPs
IP Address
196.251.121.150
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Seychelles
Location
Ghosty Networks LLC
ASN 205759
68
Reports
Mixed
Data Source
Threat Categories
Brute-Force
30
WP Login Brute Force
20
Web App Attack
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
27. August 2026
Last Activity
24. September 2026
Recent (7 days)
23 incidents
Moderate Network Risk
The network hosting this IP (ASN 205759, operated by Ghosty Networks LLC) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
72%
High Confidence
Confidence History
15. Sep 2026 - 24. Sep 2026
72%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP Login Brute Force Brute-Force | Community | 75% |
| New | WP Login Brute Force Brute-Force | Community | 75% |
| New | Brute-Force | Community | 75% |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community x2 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 196.251.121.150
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
SC
- ASN
- AS205759
- ISP
- Ghosty Networks LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 68
- First Reported
- 27 Aug 2026
- Last Reported
- 24 Sep 2026, 01:48
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS205759
Ghosty Networks LLC
US
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
341
Total IPs Monitored
6,178
Total Reports
18.1
Reports per IP
Network Context
This IP address belongs to Ghosty Networks LLC (AS205759), which manages 341 IP addresses in our monitoring system. Out of these, 6,178 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 779,151 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
68
avg: 9
++
Network Comparison
Compared against 434 IPs in ASN 205759
Threat Level
8/10
network avg: 6.7
+
Total Reports
68
network avg: 25
++
Network Ghosty Networks LLC has overall threat level 6/10
Geographic Comparison
Compared against 29,201 IPs in SC
Threat Level
8/10
country avg: 5.1
++
Total Reports
68
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Sep 2026
8 reports
Daily Average
2.3
reports/day
Most Active
Tuesday
21 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
65
WP Login Brute Force
33
WP User Enumeration
3
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
708,821 threat incidents tracked globally • Last 24h: 17,071 Logs
FEED
Top Threat Sources
-
01
United States138,031 19.5% -
02
Brazil109,777 15.5%
-
03
India77,442 10.9%
-
04
China43,588 6.1%
-
05
SC29,201 4.1%
-
06
Netherlands16,706 2.4%
-
07
Germany16,260 2.3%
-
08
Argentina16,096 2.3%
-
09
Pakistan15,589 2.2%
-
10
Colombia15,089 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
64.89.160.220
8/10
Confidence
100%
Reports
31
Location
US
US
64.89.160.178
8/10
Confidence
100%
Reports
29
Location
GB
GB
46.151.182.40
8/10
Confidence
100%
Reports
19
Location
NL
NL
43.228.157.97
8/10
Confidence
100%
Reports
18
Location
PK
PK
64.89.160.197
8/10
Confidence
100%
Reports
18
Location
US
US
64.89.160.64
8/10
Confidence
100%
Reports
18
Location
US
US
64.89.160.249
8/10
Confidence
100%
Reports
16
Location
US
US
46.151.182.172
8/10
Confidence
100%
Reports
14
Location
NL
NL
83.142.209.8
10/10
Confidence
98%
Reports
29
Location
NL
NL
36.255.97.9
8/10
Confidence
98%
Reports
18
Location
PK
PK
43.228.157.40
8/10
Confidence
97%
Reports
14
Location
PK
PK
64.89.161.180
10/10
Confidence
96%
Reports
21
Location
US
US
36.255.97.173
8/10
Confidence
96%
Reports
18
Location
PK
PK
64.89.161.56
7/10
Confidence
95%
Reports
55
Location
US
US
43.228.157.243
8/10
Confidence
95%
Reports
23
Location
PK
PK
36.255.97.195
10/10
Confidence
94%
Reports
228
Location
PK
PK
36.255.97.194
10/10
Confidence
94%
Reports
208
Location
PK
PK
36.255.97.197
10/10
Confidence
94%
Reports
87
Location
PK
PK
36.255.97.185
10/10
Confidence
94%
Reports
73
Location
PK
PK
43.228.157.211
10/10
Confidence
94%
Reports
73
Location
PK
PK
IPs from the same subnet range, likely same network segment.
11
Related IPs
6.5/10
Avg Threat
57%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
196.251.121.140
7/10
Confidence
92%
Reports
34
Location
SC
SC
196.251.121.220
7/10
Confidence
91%
Reports
184
Location
SC
SC
196.251.121.101
7/10
Confidence
88%
Reports
76
Location
SC
SC
196.251.121.215
7/10
Confidence
80%
Reports
7
Location
SC
SC
196.251.121.190
7/10
Confidence
60%
Reports
7
Location
SC
SC
196.251.121.151
7/10
Confidence
59%
Reports
67
Location
SC
SC
196.251.121.106
6/10
Confidence
38%
Reports
2
Location
SC
SC
196.251.121.108
6/10
Confidence
37%
Reports
2
Location
SC
SC
196.251.121.45
7/10
Confidence
30%
Reports
1
Location
SC
SC
196.251.121.187
6/10
Confidence
26%
Reports
2
Location
SC
SC
196.251.121.132
4/10
Confidence
23%
Reports
1
Location
SC
SC
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.232.13.161
10/10
Confidence
100%
Reports
30
ISP
YISU CLOUD LTD
154.83.16.14
10/10
Confidence
100%
Reports
20
ISP
YISU CLOUD LTD
156.236.66.15
10/10
Confidence
100%
Reports
14
ISP
YISU CLOUD LTD
154.221.20.92
10/10
Confidence
100%
Reports
13
ISP
YISU CLOUD LTD
193.39.208.26
10/10
Confidence
99%
Reports
43
ISP
Global Connecti...
45.154.244.149
10/10
Confidence
98%
Reports
25
ISP
Shereverov Mara...
154.217.253.190
10/10
Confidence
98%
Reports
20
ISP
AROSSCLOUD INC.
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.227.236.162
10/10
Confidence
98%
Reports
11
ISP
YISU CLOUD LTD
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
160.119.71.11
8/10
Confidence
97%
Reports
62
ISP
Alsycon B.V.
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
72%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
187.108.1.130
8/10
Confidence
72%
Reports
4,633
Location
BR
BR
2.57.122.209
10/10
Confidence
72%
Reports
2,739
Location
RO
RO
92.63.197.55
8/10
Confidence
72%
Reports
2,582
Location
UA
UA
45.82.78.100
10/10
Confidence
72%
Reports
2,374
Location
DE
DE
80.94.92.68
10/10
Confidence
72%
Reports
1,487
Location
RO
RO
185.246.130.20
10/10
Confidence
72%
Reports
1,315
Location
SE
SE
198.235.24.42
10/10
Confidence
72%
Reports
1,132
Location
US
US
2.57.122.96
10/10
Confidence
72%
Reports
1,021
Location
RO
RO
106.75.189.197
10/10
Confidence
72%
Reports
916
Location
CN
CN
103.183.75.90
10/10
Confidence
72%
Reports
835
Location
ID
ID
147.185.133.104
10/10
Confidence
72%
Reports
797
Location
US
US
172.104.241.98
8/10
Confidence
72%
Reports
743
Location
DE
DE
118.194.251.145
8/10
Confidence
72%
Reports
649
Location
TH
TH
45.79.181.104
10/10
Confidence
72%
Reports
611
Location
US
US
45.144.212.136
7/10
Confidence
72%
Reports
604
Location
UA
UA
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.164
- 66.132.172.165
- 66.132.172.162
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26