IP Address

205.220.208.120

IPv4 Public
US US
AS23263
E.L. Internet Northwest
3 Reports
This IP is under Observation Suspicious activity detected - monitor closely
5/10 Threat
36% Confidence
3 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Below Average Risk
US
United States Location
E.L. Internet Northwest ASN 23263
3 Reports
Honeypot Data Source

Cautionary Risk

IP 205.220.208.120 rated 5/10 from 3 security events.

Mixed behavior profile detected. Confidence: 36%.

More threatening than 49% of monitored IPs

Threat Categories

Email Spam 3

Technical Details

Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.

Recommended Mitigations

Implement SPF, DKIM, DMARC, and use reputable email filtering services.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 1 days indicates persistent threat actor operations.

First Observed 28. October 2026
Last Activity 29. October 2026
Recent (7 days) 0 incidents

Reputable Network

This IP is hosted on a network (ASN 23263) with generally good reputation. The ISP E.L. Internet Northwest maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Apply balanced security measures based on risk tolerance.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 5/10 Medium
Medium
Activity Frequency 0/10 Inactive
Confidence Score 36% Medium Confidence

Confidence History

28. Oct 2026 - 29. Oct 2026
36% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (3)

Date Categories Source Confidence
Email Spam Honeypot 75%
Email Spam Honeypot 75%
Email Spam Honeypot 75%

Technical Details

Basic Information

IP Address
205.220.208.120
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class C

Geolocation

Country
US US
ASN
AS23263
ISP
E.L. Internet Northwest

DNS Information

Reverse DNS
mail.kootenai.org
PTR Record
Yes
Connection Type
Static

Statistics

Total Reports
3
First Reported
28 Oct 2026
Last Reported
29 Oct 2026, 12:00

Comparative Analysis

How this IP compares to others in our threat intelligence database

49 %

Global Threat Ranking

This IP is more threatening than 49% of all IPs in our database.

Below Average Threat

Global Comparison

Compared against 1,326,491 reported IPs worldwide

Threat Level 5/10 avg: 6.0 -
Total Reports 3 avg: 7 --

Geographic Comparison

Compared against 206,682 IPs in US

Threat Level 5/10 country avg: 6.6 -
Total Reports 3 country avg: 16 --
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

1,209,031 threat incidents tracked globally • Last 24h: 33,647 Logs

FEED

Top Threat Sources

  1. 01
    BR
    Brazil BR
    261,011 21.6%
  2. 02
    US
    United States US THIS IP
    206,682 17.1%
  3. 03
    IN
    India IN
    103,476 8.6%
  4. 04
    CN
    China CN
    50,901 4.2%
  5. 05
    AR
    Argentina AR
    42,400 3.5%
  6. 06
    SC
    SC SC
    29,446 2.4%
  7. 07
    MX
    Mexico MX
    27,907 2.3%
  8. 08
    RU
    Russia RU
    26,971 2.2%
  9. 09
    DE
    Germany DE
    24,340 2%
  10. 10
    CO
    Colombia CO
    24,266 2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs with similar threat level and confidence scores.

15 Related IPs
10/10 Avg Threat
36% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
35.231.64.177 10/10
Confidence 36%
Reports 3
Location US US
27 Oct 2026
34.170.29.200 10/10
Confidence 36%
Reports 3
Location US US
27 Oct 2026
34.48.62.230 10/10
Confidence 36%
Reports 3
Location US US
27 Oct 2026
149.22.90.243 10/10
Confidence 36%
Reports 3
Location BE BE
27 Oct 2026
195.177.93.206 10/10
Confidence 36%
Reports 3
Location CH CH
26 Oct 2026
136.107.171.135 10/10
Confidence 36%
Reports 4
Location US US
24 Oct 2026
136.70.197.147 10/10
Confidence 36%
Reports 4
Location US US
24 Oct 2026
34.85.222.123 10/10
Confidence 36%
Reports 4
Location US US
24 Oct 2026
2405:4802:1c60:b730:c422:300b:711f:6518 10/10
Confidence 36%
Reports 4
Location VN VN
25 Oct 2026
45.154.153.13 10/10
Confidence 36%
Reports 4
Location BO BO
24 Oct 2026
34.94.114.113 10/10
Confidence 36%
Reports 4
Location US US
25 Oct 2026
158.140.166.43 10/10
Confidence 36%
Reports 3
Location ID ID
20 Oct 2026
2a01:11:221:10c0:4473:f897:ee0d:e4ef 10/10
Confidence 36%
Reports 3
Location PT PT
20 Oct 2026
93.141.207.254 10/10
Confidence 36%
Reports 3
Location HR HR
20 Oct 2026
2001:e68:7d6d:f200:6001:4c4:4922:2e56 10/10
Confidence 36%
Reports 3
Location MY MY
20 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "205.220.208.120",
    "threat_level": 5,
    "confidence_score": 36,
    "total_reports": 3,
    "country_code": "US",
    "isp_name": "E.L. Internet Northwest",
    "asn": "23263",
    "first_reported": "2026-10-28 13:00:58",
    "last_reported": "2026-10-29 12:00:10",
    "exported_at": "2026-11-06T05:56:20+01:00",
    "source": "https://reportedip.com/ip/205.220.208.120/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses