Substantial Risk
Threat level 8/10 for 208.76.40.197 based on 30 documented incidents.
Consistent suspicious behavior patterns. 76% confidence rating.
More threatening than 89% of monitored IPs
IP Address
208.76.40.197
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Indonesia
Location
PT Awan Data Teknologi
ASN 151592
30
Reports
Mixed
Data Source
Threat Categories
Brute-Force
17
WP Login Brute Force
7
WP User Enumeration
5
Web App Attack
4
SQL Injection
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
8. September 2026
Last Activity
25. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 151592) with generally good reputation. The ISP PT Awan Data Teknologi maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
75%
High Confidence
Confidence History
22. Aug 2026 - 25. Sep 2026
76%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SQL Injection Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 208.76.40.197
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
ID
- ASN
- AS151592
- ISP
- PT Awan Data Teknologi
DNS Information
- Reverse DNS
- server197.mail05.awandata.cc
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 30
- First Reported
- 22 Aug 2026
- Last Reported
- 25 Sep 2026, 09:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS151592
PT Awan Data Teknologi
ID
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1
Total IPs Monitored
4
Total Reports
4
Reports per IP
Network Context
This IP address belongs to PT Awan Data Teknologi (AS151592), which manages 1 IP addresses in our monitoring system. Out of these, 4 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,391 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
30
avg: 9
++
Network Comparison
Compared against 15 IPs in ASN 151592
Threat Level
8/10
network avg: 7.3
=
Total Reports
30
network avg: 9
++
Network PT Awan Data Teknologi has overall threat level 0/10
Geographic Comparison
Compared against 14,942 IPs in ID
Threat Level
8/10
country avg: 6.9
+
Total Reports
30
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Thursday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
17
WP Login Brute Force
7
WP User Enumeration
5
Web App Attack
4
SQL Injection
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
756,549 threat incidents tracked globally • Last 24h: 29,219 Logs
FEED
Top Threat Sources
-
01
United States148,056 19.6% -
02
Brazil111,808 14.8%
-
03
India87,140 11.5%
-
04
China46,044 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,353 2.4%
-
07
Netherlands17,970 2.4%
-
08
Pakistan17,792 2.4%
-
09
Argentina16,265 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
14
Related IPs
7.3/10
Avg Threat
27%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
202.155.143.190
8/10
Confidence
74%
Reports
30
Location
ID
ID
208.76.40.156
8/10
Confidence
65%
Reports
6
Location
ID
ID
208.76.40.195
7/10
Confidence
37%
Reports
5
Location
ID
ID
202.155.143.184
8/10
Confidence
29%
Reports
5
Location
ID
ID
202.155.143.195
8/10
Confidence
24%
Reports
3
Location
ID
ID
202.155.143.189
6/10
Confidence
24%
Reports
2
Location
ID
ID
208.76.40.131
6/10
Confidence
24%
Reports
2
Location
ID
ID
208.76.40.194
6/10
Confidence
24%
Reports
1
Location
ID
ID
2002:8f14:c72e::8f14:c72e
6/10
Confidence
23%
Reports
1
Location
ID
ID
143.20.199.46
6/10
Confidence
23%
Reports
1
Location
ID
ID
163.223.104.29
10/10
Confidence
17%
Reports
28
Location
ID
ID
208.76.40.211
8/10
Confidence
7%
Reports
4
Location
ID
ID
45.126.43.37
8/10
Confidence
4%
Reports
9
Location
ID
ID
208.76.40.91
7/10
Confidence
0%
Reports
2
Location
ID
ID
IPs from the same subnet range, likely same network segment.
6
Related IPs
7/10
Avg Threat
26%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
208.76.40.156
8/10
Confidence
65%
Reports
6
Location
ID
ID
208.76.40.195
7/10
Confidence
37%
Reports
5
Location
ID
ID
208.76.40.131
6/10
Confidence
24%
Reports
2
Location
ID
ID
208.76.40.194
6/10
Confidence
24%
Reports
1
Location
ID
ID
208.76.40.211
8/10
Confidence
7%
Reports
4
Location
ID
ID
208.76.40.91
7/10
Confidence
0%
Reports
2
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
210.87.97.90
10/10
Confidence
100%
Reports
183
ISP
PT Solusi Data ...
103.154.81.166
10/10
Confidence
100%
Reports
132
ISP
PT Mora Telemat...
160.22.240.235
10/10
Confidence
100%
Reports
126
ISP
PT Seeplus Medi...
103.121.20.18
10/10
Confidence
100%
Reports
114
ISP
PT. Eka Mas Rep...
103.90.25.52
10/10
Confidence
100%
Reports
112
ISP
PT. Arana Tekno...
103.162.1.80
10/10
Confidence
100%
Reports
97
ISP
PT Satu Sistem ...
103.214.100.4
10/10
Confidence
100%
Reports
92
ISP
PT SURYA TEKNIK...
117.102.87.140
10/10
Confidence
100%
Reports
89
ISP
BIZNET NETWORKS
103.154.137.43
10/10
Confidence
100%
Reports
78
ISP
PT Mora Telemat...
36.64.131.68
10/10
Confidence
100%
Reports
78
ISP
PT Telekomunika...
103.79.90.26
10/10
Confidence
100%
Reports
76
ISP
PEMERINTAH KABU...
202.150.130.180
10/10
Confidence
100%
Reports
68
ISP
PT Comtronics S...
103.154.137.41
10/10
Confidence
100%
Reports
67
ISP
PT Mora Telemat...
103.162.69.11
10/10
Confidence
100%
Reports
65
ISP
Dinas Komunikas...
119.47.88.254
8/10
Confidence
100%
Reports
57
ISP
JAWA POS NATION...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
76%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
196.189.24.103
8/10
Confidence
76%
Reports
9
Location
ET
ET
47.251.248.133
10/10
Confidence
76%
Reports
19
Location
US
US
35.203.210.29
10/10
Confidence
76%
Reports
124
Location
GB
GB
35.203.210.192
10/10
Confidence
76%
Reports
122
Location
GB
GB
176.65.149.224
10/10
Confidence
76%
Reports
7,835
Location
NL
NL
198.235.24.87
8/10
Confidence
76%
Reports
200
Location
US
US
35.203.211.140
10/10
Confidence
76%
Reports
115
Location
GB
GB
91.196.152.104
10/10
Confidence
76%
Reports
310
Location
FR
FR
198.235.24.233
8/10
Confidence
76%
Reports
174
Location
US
US
161.33.152.222
8/10
Confidence
76%
Reports
22
Location
JP
JP
91.231.89.248
8/10
Confidence
76%
Reports
271
Location
FR
FR
195.184.76.70
10/10
Confidence
76%
Reports
337
Location
US
US
147.185.132.196
10/10
Confidence
76%
Reports
117
Location
US
US
45.194.70.250
10/10
Confidence
76%
Reports
169
Location
MU
MU
91.231.89.175
10/10
Confidence
76%
Reports
320
Location
FR
FR