Critical Alert
Security alert: 199.165.159.169 rated 10/10 based on 8 verified incidents.
Threat profile indicates sustained malicious activity with 68% confidence rating.
More threatening than 99% of monitored IPs
IP Address
199.165.159.169
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
United States
Location
The Shadowserver Foundati...
ASN 22168
8
Reports
Honeypot
Data Source
Threat Categories
Hacking
6
Exploited Host
2
SSH
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
24. October 2026
Last Activity
26. October 2026
Recent (7 days)
8 incidents
Reputable Network
This IP is hosted on a network (ASN 22168) with generally good reputation. The ISP The Shadowserver Foundation, Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
68%
High Confidence
Confidence History
24. Oct 2026 - 26. Oct 2026
68%
Current
Stable
Trend
Security Reports (8)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| Exploited Host SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 199.165.159.169
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
US
- ASN
- AS22168
- ISP
- The Shadowserver Foundation, Inc.
DNS Information
- Reverse DNS
- scan-84-0.shadowserver.io
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 8
- First Reported
- 27 Oct 2026
- Last Reported
- 26 Oct 2026, 03:17
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,269,010 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
8
avg: 7
+
Network Comparison
Compared against 41 IPs in ASN 22168
Threat Level
10/10
network avg: 8.4
+
Total Reports
8
network avg: 16
-
Geographic Comparison
Compared against 196,212 IPs in US
Threat Level
10/10
country avg: 6.6
++
Total Reports
8
country avg: 16
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
25 Oct 2026
5 reports
Daily Average
0.3
reports/day
Most Active
Sunday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
6
Exploited Host
2
SSH
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,155,979 threat incidents tracked globally • Last 24h: 31,180 Logs
FEED
Top Threat Sources
-
01
Brazil257,747 22.3% -
02
United States196,212 17%
-
03
India100,059 8.7% -
04
China48,908 4.2% -
05
Argentina41,691 3.6% -
06
SC29,371 2.5% -
07
Mexico27,164 2.3% -
08
Russia26,038 2.3% -
09
Colombia23,943 2.1% -
10
Germany21,879 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
77%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
199.165.159.25
8/10
Confidence
94%
Reports
82
Location
US
US
199.165.159.17
10/10
Confidence
94%
Reports
81
Location
US
US
199.165.159.41
10/10
Confidence
94%
Reports
75
Location
US
US
199.165.159.65
10/10
Confidence
94%
Reports
73
Location
US
US
199.165.159.33
8/10
Confidence
94%
Reports
65
Location
US
US
199.165.159.57
10/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.49
8/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.9
10/10
Confidence
94%
Reports
16
Location
US
US
199.165.159.81
10/10
Confidence
79%
Reports
10
Location
US
US
199.165.159.185
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.105
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.73
8/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.153
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.217
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.113
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.145
10/10
Confidence
62%
Reports
5
Location
US
US
199.165.159.121
8/10
Confidence
59%
Reports
6
Location
US
US
199.165.159.201
10/10
Confidence
57%
Reports
6
Location
US
US
199.165.159.177
10/10
Confidence
57%
Reports
6
Location
US
US
199.165.159.89
10/10
Confidence
57%
Reports
6
Location
US
US
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.5/10
Avg Threat
77%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
199.165.159.25
8/10
Confidence
94%
Reports
82
Location
US
US
199.165.159.17
10/10
Confidence
94%
Reports
81
Location
US
US
199.165.159.41
10/10
Confidence
94%
Reports
75
Location
US
US
199.165.159.65
10/10
Confidence
94%
Reports
73
Location
US
US
199.165.159.33
8/10
Confidence
94%
Reports
65
Location
US
US
199.165.159.49
8/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.57
10/10
Confidence
94%
Reports
64
Location
US
US
199.165.159.9
10/10
Confidence
94%
Reports
16
Location
US
US
199.165.159.81
10/10
Confidence
79%
Reports
10
Location
US
US
199.165.159.185
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.105
10/10
Confidence
74%
Reports
9
Location
US
US
199.165.159.129
10/10
Confidence
68%
Reports
8
199.165.159.153
10/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.73
8/10
Confidence
68%
Reports
8
Location
US
US
199.165.159.217
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.113
10/10
Confidence
63%
Reports
7
Location
US
US
199.165.159.145
10/10
Confidence
62%
Reports
5
Location
US
US
199.165.159.121
8/10
Confidence
59%
Reports
6
Location
US
US
199.165.159.177
10/10
Confidence
57%
Reports
6
Location
US
US
199.165.159.201
10/10
Confidence
57%
Reports
6
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.70.67.198
8/10
Confidence
100%
Reports
80
ISP
Google LLC
35.196.98.155
8/10
Confidence
100%
Reports
53
ISP
Google LLC
104.28.201.73
10/10
Confidence
100%
Reports
40
ISP
Cloudflare, Inc.
166.62.41.13
10/10
Confidence
100%
Reports
33
ISP
GoDaddy.com, LLC
77.239.124.46
10/10
Confidence
100%
Reports
27
ISP
Banatsync Srl
199.19.225.232
10/10
Confidence
100%
Reports
25
ISP
FranTech Solutions
34.139.102.100
8/10
Confidence
100%
Reports
23
ISP
Google LLC
104.28.228.78
10/10
Confidence
100%
Reports
22
ISP
Cloudflare, Inc.
165.154.162.74
10/10
Confidence
100%
Reports
21
ISP
UCLOUD INFORMAT...
104.28.228.77
8/10
Confidence
100%
Reports
21
ISP
Cloudflare, Inc.
35.252.168.18
8/10
Confidence
100%
Reports
20
ISP
Google LLC
104.28.196.78
10/10
Confidence
100%
Reports
20
ISP
Cloudflare, Inc.
35.254.136.149
10/10
Confidence
100%
Reports
19
ISP
Google LLC
34.59.15.171
8/10
Confidence
100%
Reports
18
ISP
Google LLC
2602:fa59:10:c38::1
10/10
Confidence
100%
Reports
18
ISP
RouterHosting LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
68%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
8.216.16.18
10/10
Confidence
68%
Reports
15
Location
JP
JP
87.247.217.81
10/10
Confidence
68%
Reports
33
Location
AT
AT
158.94.200.87
6/10
Confidence
68%
Reports
10
Location
US
US
124.43.6.59
10/10
Confidence
68%
Reports
53
Location
LK
LK
47.251.96.168
8/10
Confidence
68%
Reports
18
Location
US
US
47.254.154.160
10/10
Confidence
68%
Reports
21
Location
DE
DE
94.231.206.107
10/10
Confidence
68%
Reports
45
Location
CN
CN
62.133.46.15
10/10
Confidence
68%
Reports
9
Location
IR
IR
206.204.8.218
6/10
Confidence
68%
Reports
10
Location
US
US
104.152.52.135
8/10
Confidence
68%
Reports
17
Location
US
US
47.250.94.250
10/10
Confidence
68%
Reports
12
Location
MY
MY
104.152.52.229
10/10
Confidence
68%
Reports
14
Location
US
US
64.62.197.28
10/10
Confidence
68%
Reports
14
Location
US
US
185.223.152.42
8/10
Confidence
68%
Reports
16
Location
US
US
185.223.152.49
10/10
Confidence
68%
Reports
20
Location
US
US