Critical Alert
Security alert: 205.237.106.81 rated 10/10 based on 68 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 100% of monitored IPs
IP Address
205.237.106.81
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
France
Location
ESTOXY OU
ASN 61254
68
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Exploited Host
3
Web App Attack
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
27. September 2026
Last Activity
30. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 61254) with generally good reputation. The ISP ESTOXY OU maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
7/10
High
Confidence Score
94%
Verified
Confidence History
29. Sep 2026 - 30. Sep 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Web App Attack Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Hacking Web App Attack | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Web App Attack Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 205.237.106.81
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
FR
- ASN
- AS61254
- ISP
- ESTOXY OU
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 68
- First Reported
- 27 Sep 2026
- Last Reported
- 30 Sep 2026, 20:18
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,391 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
68
avg: 9
++
Network Comparison
Compared against 27 IPs in ASN 61254
Threat Level
10/10
network avg: 7.5
+
Total Reports
68
network avg: 10
++
Geographic Comparison
Compared against 12,203 IPs in FR
Threat Level
10/10
country avg: 6.7
+
Total Reports
68
country avg: 22
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
28 Sep 2026
30 reports
Daily Average
2.3
reports/day
Most Active
Monday
30 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
68
Web App Attack
3
Exploited Host
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
756,711 threat incidents tracked globally • Last 24h: 29,326 Logs
FEED
Top Threat Sources
-
01
United States148,093 19.6% -
02
Brazil111,821 14.8%
-
03
India87,156 11.5%
-
04
China46,051 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,360 2.4%
-
07
Netherlands17,975 2.4%
-
08
Pakistan17,801 2.4%
-
09
Argentina16,265 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.7/10
Avg Threat
37%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
205.237.104.18
10/10
Confidence
94%
Reports
77
Location
FR
FR
205.237.104.121
10/10
Confidence
94%
Reports
23
Location
FR
FR
37.49.228.84
7/10
Confidence
91%
Reports
17
Location
NL
NL
205.237.105.190
10/10
Confidence
86%
Reports
12
Location
FR
FR
37.49.225.20
10/10
Confidence
37%
Reports
13
Location
NL
NL
37.49.227.165
6/10
Confidence
33%
Reports
2
Location
NL
NL
205.237.107.65
10/10
Confidence
28%
Reports
13
Location
FR
FR
205.237.106.126
7/10
Confidence
25%
Reports
1
Location
FR
FR
205.237.105.132
10/10
Confidence
24%
Reports
11
Location
FR
FR
37.49.227.149
6/10
Confidence
24%
Reports
2
Location
NL
NL
185.241.206.44
8/10
Confidence
24%
Reports
1
Location
NL
NL
205.237.104.63
6/10
Confidence
23%
Reports
1
Location
FR
FR
185.53.90.32
6/10
Confidence
22%
Reports
1
Location
EE
EE
37.49.225.175
7/10
Confidence
22%
Reports
1
Location
NL
NL
37.49.224.232
7/10
Confidence
22%
Reports
1
Location
FR
FR
37.49.226.115
6/10
Confidence
21%
Reports
1
Location
NL
NL
205.237.104.159
7/10
Confidence
20%
Reports
1
Location
FR
FR
117.55.202.187
6/10
Confidence
19%
Reports
1
Location
FR
FR
205.237.106.195
7/10
Confidence
15%
Reports
2
Location
FR
FR
37.49.229.5
7/10
Confidence
13%
Reports
2
Location
NL
NL
IPs from the same subnet range, likely same network segment.
6
Related IPs
7.7/10
Avg Threat
10%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
205.237.106.126
7/10
Confidence
25%
Reports
1
Location
FR
FR
205.237.106.195
7/10
Confidence
15%
Reports
2
Location
FR
FR
205.237.106.86
7/10
Confidence
11%
Reports
1
Location
FR
FR
205.237.106.117
10/10
Confidence
4%
Reports
13
Location
FR
FR
205.237.106.198
8/10
Confidence
1%
Reports
3
Location
FR
FR
205.237.106.5
7/10
Confidence
1%
Reports
1
Location
FR
FR
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
94.23.66.112
10/10
Confidence
100%
Reports
254
ISP
OVH SAS
185.177.72.128
10/10
Confidence
100%
Reports
165
ISP
Bucklog SARL
91.231.89.33
8/10
Confidence
100%
Reports
115
ISP
ONYPHE SAS
51.75.21.168
10/10
Confidence
100%
Reports
96
ISP
OVH SAS
51.38.115.161
10/10
Confidence
100%
Reports
30
ISP
OVH SAS
185.177.72.75
8/10
Confidence
100%
Reports
28
ISP
Bucklog SARL
2a01:e0a:acc:c9e0:ac3b:7cab:5def:d961
8/10
Confidence
100%
Reports
28
ISP
Free SAS
141.95.162.162
10/10
Confidence
100%
Reports
25
ISP
OVH SAS
54.38.109.115
10/10
Confidence
100%
Reports
20
ISP
OVH SAS
51.75.27.218
10/10
Confidence
100%
Reports
20
ISP
OVH SAS
37.187.35.26
10/10
Confidence
99%
Reports
19
ISP
OVH SAS
51.68.151.167
10/10
Confidence
99%
Reports
17
ISP
OVH SAS
185.177.72.45
10/10
Confidence
98%
Reports
193
ISP
Bucklog SARL
91.231.89.23
10/10
Confidence
98%
Reports
123
ISP
ONYPHE SAS
91.231.89.121
10/10
Confidence
98%
Reports
122
ISP
ONYPHE SAS
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
217.138.216.62
10/10
Confidence
94%
Reports
23
Location
DE
DE
89.169.21.17
10/10
Confidence
94%
Reports
26
Location
RU
RU
103.153.130.249
10/10
Confidence
94%
Reports
37
Location
BD
BD
103.153.130.69
10/10
Confidence
94%
Reports
37
Location
BD
BD
103.153.130.160
10/10
Confidence
94%
Reports
37
Location
BD
BD
103.153.130.180
10/10
Confidence
94%
Reports
37
Location
BD
BD
166.0.28.132
10/10
Confidence
94%
Reports
17
Location
DE
DE
2a02:4780:12:4d3d::1
10/10
Confidence
94%
Reports
13
Location
IN
IN
89.39.149.156
10/10
Confidence
94%
Reports
16
Location
RO
RO
217.138.216.70
10/10
Confidence
94%
Reports
73
Location
DE
DE
192.154.96.242
10/10
Confidence
94%
Reports
15
Location
US
US
123.253.37.70
10/10
Confidence
94%
Reports
63
Location
BD
BD
103.91.128.153
10/10
Confidence
94%
Reports
99
Location
BD
BD
123.253.38.86
10/10
Confidence
94%
Reports
164
Location
BD
BD
123.253.38.84
10/10
Confidence
94%
Reports
98
Location
BD
BD