Critical Alert
Security alert: 199.165.159.161 rated 10/10 based on 9 verified incidents.
Threat profile indicates sustained malicious activity with 74% confidence rating.
More threatening than 99% of monitored IPs
IP Address
199.165.159.161
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
United States
Location
The Shadowserver Foundati...
ASN 22168
9
Reports
Honeypot
Data Source
Threat Categories
Hacking
9
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
25. October 2026
Last Activity
27. October 2026
Recent (7 days)
9 incidents
Reputable Network
This IP is hosted on a network (ASN 22168) with generally good reputation. The ISP The Shadowserver Foundation, Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
74%
High Confidence
Confidence History
25. Oct 2026 - 27. Oct 2026
74%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 199.165.159.161
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
US
- ASN
- AS22168
- ISP
- The Shadowserver Foundation, Inc.
DNS Information
- Reverse DNS
- scan-83-0.shadowserver.io
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 9
- First Reported
- 27 Oct 2026
- Last Reported
- 27 Oct 2026, 02:31
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,274,875 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
9
avg: 7
+
Network Comparison
Compared against 58 IPs in ASN 22168
Threat Level
10/10
network avg: 8.2
+
Total Reports
9
network avg: 12
-
Geographic Comparison
Compared against 197,283 IPs in US
Threat Level
10/10
country avg: 6.6
++
Total Reports
9
country avg: 16
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Oct 2026
5 reports
Daily Average
0.3
reports/day
Most Active
Monday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,163,213 threat incidents tracked globally • Last 24h: 31,271 Logs
FEED
Top Threat Sources
-
01
Brazil257,950 22.2% -
02
United States197,488 17%
-
03
India100,910 8.7% -
04
China49,130 4.2% -
05
Argentina41,733 3.6% -
06
SC29,385 2.5% -
07
Mexico27,218 2.3% -
08
Russia26,128 2.2% -
09
Colombia23,958 2.1% -
10
Germany22,259 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
79%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
199.165.159.25
8/10
Confidence
94%
Reports
83
Location
US
US
199.165.159.17
10/10
Confidence
94%
Reports
82
Location
US
US
199.165.159.41
10/10
Confidence
94%
Reports
75
Location
US
US
199.165.159.65
10/10
Confidence
94%
Reports
74
Location
US
US
199.165.159.33
8/10
Confidence
94%
Reports
66
Location
US
US
199.165.159.57
10/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.49
8/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.9
10/10
Confidence
94%
Reports
16
Location
US
US
199.165.159.81
10/10
Confidence
79%
Reports
10
Location
US
US
199.165.159.185
10/10
Confidence
79%
Reports
10
Location
US
US
199.165.159.153
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.105
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.193
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.129
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.169
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.73
8/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.113
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.137
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.217
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.97
10/10
Confidence
62%
Reports
5
Location
US
US
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.6/10
Avg Threat
79%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
199.165.159.25
8/10
Confidence
94%
Reports
83
Location
US
US
199.165.159.17
10/10
Confidence
94%
Reports
82
Location
US
US
199.165.159.41
10/10
Confidence
94%
Reports
75
Location
US
US
199.165.159.65
10/10
Confidence
94%
Reports
74
Location
US
US
199.165.159.33
8/10
Confidence
94%
Reports
66
Location
US
US
199.165.159.49
8/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.57
10/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.9
10/10
Confidence
94%
Reports
16
Location
US
US
199.165.159.81
10/10
Confidence
79%
Reports
10
Location
US
US
199.165.159.185
10/10
Confidence
79%
Reports
10
Location
US
US
199.165.159.105
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.153
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.169
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.129
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.113
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.73
8/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.193
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.137
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.217
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.97
10/10
Confidence
62%
Reports
5
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.70.67.198
8/10
Confidence
100%
Reports
80
ISP
Google LLC
35.196.98.155
8/10
Confidence
100%
Reports
53
ISP
Google LLC
104.28.201.73
10/10
Confidence
100%
Reports
41
ISP
Cloudflare, Inc.
166.62.41.13
10/10
Confidence
100%
Reports
33
ISP
GoDaddy.com, LLC
77.239.124.46
10/10
Confidence
100%
Reports
27
ISP
Banatsync Srl
199.19.225.232
10/10
Confidence
100%
Reports
25
ISP
FranTech Solutions
34.139.102.100
8/10
Confidence
100%
Reports
23
ISP
Google LLC
104.28.228.78
10/10
Confidence
100%
Reports
22
ISP
Cloudflare, Inc.
165.154.162.74
10/10
Confidence
100%
Reports
21
ISP
UCLOUD INFORMAT...
104.28.228.77
8/10
Confidence
100%
Reports
21
ISP
Cloudflare, Inc.
35.252.168.18
8/10
Confidence
100%
Reports
20
ISP
Google LLC
104.28.196.78
10/10
Confidence
100%
Reports
20
ISP
Cloudflare, Inc.
35.254.136.149
10/10
Confidence
100%
Reports
19
ISP
Google LLC
147.90.234.19
10/10
Confidence
100%
Reports
19
ISP
Fourplex Teleco...
34.74.37.180
8/10
Confidence
100%
Reports
18
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
74%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
91.231.89.61
10/10
Confidence
74%
Reports
344
Location
FR
FR
34.85.128.12
10/10
Confidence
74%
Reports
10
Location
US
US
177.33.141.32
8/10
Confidence
74%
Reports
7
Location
BR
BR
168.194.164.3
10/10
Confidence
74%
Reports
16
Location
BR
BR
167.234.110.25
6/10
Confidence
74%
Reports
11
Location
US
US
147.185.132.172
10/10
Confidence
74%
Reports
118
Location
US
US
91.230.168.26
10/10
Confidence
74%
Reports
327
Location
US
US
78.153.140.39
8/10
Confidence
74%
Reports
1,146
Location
GB
GB
211.172.246.64
10/10
Confidence
74%
Reports
22
Location
KR
KR
5.226.140.121
10/10
Confidence
74%
Reports
10
Location
GB
GB
105.96.109.45
10/10
Confidence
74%
Reports
58
Location
DZ
DZ
104.223.82.216
6/10
Confidence
74%
Reports
13
Location
US
US
206.204.53.149
6/10
Confidence
74%
Reports
13
Location
US
US
45.78.91.241
6/10
Confidence
74%
Reports
13
Location
US
US
165.154.120.223
10/10
Confidence
74%
Reports
123
Location
TH
TH