Significant Threat
IP 199.38.125.96 identified as significant threat (8/10) from 21 events.
Multiple malicious indicators detected. Confidence level: 74%.
More threatening than 89% of monitored IPs
IP Address
199.38.125.96
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
Ritter Communications
ASN 23404
21
Reports
Mixed
Data Source
Threat Categories
Brute-Force
16
Web App Attack
5
WP Login Brute Force
5
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 6 days indicates persistent threat actor operations.
First Observed
28. September 2026
Last Activity
4. October 2026
Recent (7 days)
10 incidents
Reputable Network
This IP is hosted on a network (ASN 23404) with generally good reputation. The ISP Ritter Communications maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
74%
High Confidence
Confidence History
22. Jun 2026 - 4. Oct 2026
74%
Current
Stable
Trend
Security Reports (21)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 199.38.125.96
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
US
- ASN
- AS23404
- ISP
- Ritter Communications
DNS Information
- Reverse DNS
- host96-125-38-199.xipline.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 21
- First Reported
- 22 Jun 2026
- Last Reported
- 4 Oct 2026, 14:27
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 833,268 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
21
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 23404
Threat Level
8/10
network avg: 7.5
=
Total Reports
21
network avg: 11
++
Geographic Comparison
Compared against 148,275 IPs in US
Threat Level
8/10
country avg: 6.8
+
Total Reports
21
country avg: 18
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Oct 2026
5 reports
Daily Average
0.4
reports/day
Most Active
Friday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
16
WP Login Brute Force
5
Web App Attack
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
757,520 threat incidents tracked globally • Last 24h: 30,709 Logs
FEED
Top Threat Sources
-
01
United States148,275 19.6% -
02
Brazil111,878 14.8%
-
03
India87,206 11.5%
-
04
China46,091 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,444 2.4%
-
07
Netherlands18,000 2.4%
-
08
Pakistan17,825 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
28%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
74%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
84.54.59.123
10/10
Confidence
74%
Reports
9
Location
RU
RU
144.126.144.174
8/10
Confidence
74%
Reports
9
Location
US
US
151.243.11.201
10/10
Confidence
74%
Reports
9
Location
AE
AE
45.198.224.237
10/10
Confidence
74%
Reports
9
Location
US
US
45.198.224.239
10/10
Confidence
74%
Reports
9
Location
US
US
165.232.116.5
10/10
Confidence
74%
Reports
9
Location
DE
DE
2401:4900:8899:b53b:94a9:a012:3af4:5f32
10/10
Confidence
74%
Reports
7
Location
IN
IN
43.173.33.166
10/10
Confidence
74%
Reports
8
Location
ID
ID
138.68.88.64
10/10
Confidence
74%
Reports
9
Location
DE
DE
213.166.84.34
8/10
Confidence
74%
Reports
9
Location
GB
GB
34.140.155.193
10/10
Confidence
74%
Reports
5
Location
BE
BE
35.194.227.47
8/10
Confidence
74%
Reports
7
Location
TW
TW
93.123.101.13
10/10
Confidence
74%
Reports
9
Location
DE
DE
58.8.210.19
8/10
Confidence
74%
Reports
11
Location
TH
TH
94.61.235.86
10/10
Confidence
74%
Reports
13
Location
PT
PT