Extreme Threat
IP 201.249.87.203 classified at threat level 10/10 with 63 documented attacks.
Advanced threat indicators confirmed with 67% certainty.
More threatening than 99% of monitored IPs
IP Address
201.249.87.203
IPv4
Public
VE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
VE
Location
CANTV Servicios, Venezuel...
ASN 8048
63
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Hacking
4
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
18. September 2026
Last Activity
18. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 8048, operated by CANTV Servicios, Venezuela) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
67%
High Confidence
Confidence History
3. Mar 2026 - 18. Sep 2026
67%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 201.249.87.203
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
VE
- ASN
- AS8048
- ISP
- CANTV Servicios, Venezuela
DNS Information
- Reverse DNS
- 201.249.87-203.bto-00.rai.cantv.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 63
- First Reported
- 19 Feb 2026
- Last Reported
- 18 Sep 2026, 16:33
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8048
CANTV Servicios, Venezuela
VE
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
124
Total IPs Monitored
1,046
Total Reports
8.4
Reports per IP
Network Context
This IP address belongs to CANTV Servicios, Venezuela (AS8048), which manages 124 IP addresses in our monitoring system. Out of these, 1,046 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 807,708 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
63
avg: 9
++
Network Comparison
Compared against 600 IPs in ASN 8048
Threat Level
10/10
network avg: 6.0
++
Total Reports
63
network avg: 3
++
Network CANTV Servicios, Venezuela has overall threat level 5/10
Geographic Comparison
Compared against 6,041 IPs in VE
Threat Level
10/10
country avg: 5.3
++
Total Reports
63
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Sunday
26 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
55
Hacking
19
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 20:00 with 10 reports
Weekly Activity
Geographic Threat Distribution
734,478 threat incidents tracked globally • Last 24h: 27,804 Logs
FEED
Top Threat Sources
-
01
United States143,526 19.5% -
02
Brazil110,786 15.1%
-
03
India82,292 11.2%
-
04
China44,815 6.1%
-
05
SC29,236 4%
-
06
Germany17,528 2.4%
-
07
Netherlands17,497 2.4%
-
08
Pakistan16,679 2.3%
-
09
Argentina16,193 2.2%
-
10
Colombia15,136 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
61%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
190.75.152.101
8/10
Confidence
100%
Reports
14
Location
VE
VE
190.202.89.69
10/10
Confidence
94%
Reports
219
Location
VE
VE
190.202.87.179
10/10
Confidence
88%
Reports
9
Location
VE
VE
201.249.192.30
10/10
Confidence
86%
Reports
168
Location
VE
VE
190.202.88.51
10/10
Confidence
82%
Reports
42
Location
VE
VE
201.249.71.251
10/10
Confidence
80%
Reports
15
Location
VE
VE
190.202.83.181
8/10
Confidence
68%
Reports
6
Location
VE
VE
201.248.70.122
10/10
Confidence
64%
Reports
13
Location
VE
VE
201.248.67.246
10/10
Confidence
63%
Reports
133
Location
VE
VE
201.249.205.94
10/10
Confidence
60%
Reports
137
Location
VE
VE
201.249.89.102
10/10
Confidence
60%
Reports
28
Location
VE
VE
201.248.68.246
10/10
Confidence
53%
Reports
10
Location
VE
VE
201.243.146.152
10/10
Confidence
53%
Reports
4
Location
VE
VE
190.202.7.78
10/10
Confidence
52%
Reports
15
Location
VE
VE
201.249.166.171
10/10
Confidence
46%
Reports
15
Location
VE
VE
190.199.186.222
10/10
Confidence
42%
Reports
16
Location
VE
VE
190.202.5.52
10/10
Confidence
41%
Reports
4
Location
VE
VE
200.109.233.2
7/10
Confidence
33%
Reports
2
Location
VE
VE
190.75.82.62
8/10
Confidence
32%
Reports
4
Location
VE
VE
190.202.18.190
10/10
Confidence
31%
Reports
4
Location
VE
VE
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
8%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
189.127.167.6
8/10
Confidence
100%
Reports
19
ISP
RED SERVITEL, CA
190.75.152.101
8/10
Confidence
100%
Reports
14
ISP
CANTV Servicios...
38.17.158.68
8/10
Confidence
97%
Reports
19
ISP
TELECOMUNICACIO...
190.202.89.69
10/10
Confidence
94%
Reports
219
ISP
CANTV Servicios...
190.202.87.179
10/10
Confidence
88%
Reports
9
ISP
CANTV Servicios...
201.249.192.30
10/10
Confidence
86%
Reports
168
ISP
CANTV Servicios...
38.43.208.5
10/10
Confidence
85%
Reports
12
ISP
FULL DATA COMUN...
190.202.88.51
10/10
Confidence
82%
Reports
42
ISP
CANTV Servicios...
201.249.71.251
10/10
Confidence
80%
Reports
15
ISP
CANTV Servicios...
189.127.167.192
8/10
Confidence
77%
Reports
31
ISP
RED SERVITEL, CA
154.23.13.147
8/10
Confidence
74%
Reports
6
ISP
4 EVER PLUG,C.A.
190.153.120.64
10/10
Confidence
73%
Reports
15
ISP
Net Uno, C.A.
200.8.228.57
8/10
Confidence
72%
Reports
16
ISP
Corporacion Tel...
181.225.50.2
10/10
Confidence
70%
Reports
19
ISP
IFX Networks Ve...
200.35.109.130
10/10
Confidence
69%
Reports
83
ISP
TELEFONICA VENE...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
67%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
59.125.55.30
10/10
Confidence
67%
Reports
1,108
Location
TW
TW
185.243.5.118
7/10
Confidence
67%
Reports
714
Location
HK
HK
162.216.149.205
10/10
Confidence
67%
Reports
594
Location
US
US
103.181.143.216
10/10
Confidence
67%
Reports
505
Location
ID
ID
204.76.203.214
10/10
Confidence
67%
Reports
482
Location
NL
NL
204.76.203.221
10/10
Confidence
67%
Reports
467
Location
NL
NL
5.39.57.91
8/10
Confidence
67%
Reports
387
Location
FR
FR
39.125.93.26
10/10
Confidence
67%
Reports
330
Location
KR
KR
185.243.5.46
8/10
Confidence
67%
Reports
315
Location
HK
HK
45.205.1.244
10/10
Confidence
67%
Reports
300
Location
BR
BR
91.238.181.10
10/10
Confidence
67%
Reports
286
Location
FR
FR
45.205.1.243
10/10
Confidence
67%
Reports
282
Location
BR
BR
45.205.1.242
10/10
Confidence
67%
Reports
254
Location
BR
BR
147.185.132.175
10/10
Confidence
67%
Reports
240
Location
US
US
144.172.68.56
7/10
Confidence
67%
Reports
216
Location
US
US