Elevated Risk
Elevated threat level 8/10 for IP 210.79.191.205 from 42 reported incidents.
Behavioral profile indicates cyber threat activity with 74% confidence.
More threatening than 90% of monitored IPs
IP Address
210.79.191.205
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
ID
Location
PT Cloud Hosting Indonesi...
ASN 136052
42
Reports
Mixed
Data Source
Threat Categories
SSH
30
Brute-Force
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
1. September 2026
Last Activity
28. September 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 136052) with generally good reputation. The ISP PT Cloud Hosting Indonesia maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
74%
High Confidence
Confidence History
18. Apr 2026 - 28. Sep 2026
74%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 210.79.191.205
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
ID
- ASN
- AS136052
- ISP
- PT Cloud Hosting Indonesia
DNS Information
- Reverse DNS
- ip210-79-191-205.cloudhost.web.id
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 42
- First Reported
- 20 Feb 2026
- Last Reported
- 28 Sep 2026, 12:35
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS136052
PT Cloud Hosting Indonesia
ID
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
341
Total IPs Monitored
50,007
Total Reports
146.6
Reports per IP
Network Context
This IP address belongs to PT Cloud Hosting Indonesia (AS136052), which manages 341 IP addresses in our monitoring system. Out of these, 50,007 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 805,472 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
42
avg: 9
++
Network Comparison
Compared against 458 IPs in ASN 136052
Threat Level
8/10
network avg: 8.5
=
Total Reports
42
network avg: 111
--
Network PT Cloud Hosting Indonesia has overall threat level 2/10
Geographic Comparison
Compared against 14,141 IPs in ID
Threat Level
8/10
country avg: 6.9
+
Total Reports
42
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
28 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
42
Brute-Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
732,564 threat incidents tracked globally • Last 24h: 28,865 Logs
FEED
Top Threat Sources
-
01
United States143,097 19.5% -
02
Brazil110,689 15.1%
-
03
India82,024 11.2%
-
04
China44,688 6.1%
-
05
SC29,232 4%
-
06
Netherlands17,444 2.4%
-
07
Germany17,413 2.4%
-
08
Pakistan16,575 2.3%
-
09
Argentina16,184 2.2%
-
10
Colombia15,130 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
79%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.76.120.90
10/10
Confidence
98%
Reports
11
Location
ID
ID
210.79.190.251
10/10
Confidence
89%
Reports
7
Location
ID
ID
103.193.179.139
10/10
Confidence
85%
Reports
18
Location
ID
ID
103.67.78.178
8/10
Confidence
85%
Reports
8
Location
ID
ID
210.79.191.170
10/10
Confidence
83%
Reports
35
Location
ID
ID
103.63.25.111
8/10
Confidence
83%
Reports
15
Location
ID
ID
103.186.1.158
8/10
Confidence
83%
Reports
9
Location
ID
ID
103.59.94.117
10/10
Confidence
82%
Reports
46
Location
ID
ID
103.186.0.68
10/10
Confidence
81%
Reports
107
Location
ID
ID
103.49.239.105
8/10
Confidence
78%
Reports
7
Location
ID
ID
210.79.191.76
10/10
Confidence
77%
Reports
65
Location
ID
ID
103.49.238.23
8/10
Confidence
77%
Reports
12
Location
ID
ID
103.82.92.82
8/10
Confidence
76%
Reports
14
Location
ID
ID
103.183.75.239
8/10
Confidence
73%
Reports
6
Location
ID
ID
103.186.0.79
8/10
Confidence
72%
Reports
82
Location
ID
ID
103.76.120.87
10/10
Confidence
72%
Reports
38
Location
ID
ID
103.76.120.114
8/10
Confidence
72%
Reports
7
Location
ID
ID
103.59.95.187
8/10
Confidence
71%
Reports
16
Location
ID
ID
103.63.25.214
8/10
Confidence
71%
Reports
15
Location
ID
ID
103.183.75.14
8/10
Confidence
71%
Reports
10
Location
ID
ID
IPs from the same subnet range, likely same network segment.
18
Related IPs
8.6/10
Avg Threat
20%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
210.79.191.170
10/10
Confidence
83%
Reports
35
Location
ID
ID
210.79.191.76
10/10
Confidence
77%
Reports
65
Location
ID
ID
210.79.191.178
8/10
Confidence
65%
Reports
68
Location
ID
ID
210.79.191.174
10/10
Confidence
54%
Reports
5
Location
ID
ID
210.79.191.176
7/10
Confidence
31%
Reports
2
Location
ID
ID
210.79.191.221
10/10
Confidence
21%
Reports
3
Location
ID
ID
210.79.191.61
8/10
Confidence
14%
Reports
15
Location
ID
ID
210.79.191.115
10/10
Confidence
5%
Reports
36
Location
ID
ID
210.79.191.89
8/10
Confidence
5%
Reports
10
Location
ID
ID
210.79.191.10
8/10
Confidence
3%
Reports
6
Location
ID
ID
210.79.191.199
10/10
Confidence
2%
Reports
91
Location
ID
ID
210.79.191.18
8/10
Confidence
1%
Reports
85
Location
ID
ID
210.79.191.216
8/10
Confidence
1%
Reports
9
Location
ID
ID
210.79.191.44
8/10
Confidence
1%
Reports
3
Location
ID
ID
210.79.191.227
7/10
Confidence
1%
Reports
1
Location
ID
ID
210.79.191.147
10/10
Confidence
0%
Reports
4,504
Location
ID
ID
210.79.191.48
7/10
Confidence
0%
Reports
1
Location
ID
ID
210.79.191.159
7/10
Confidence
0%
Reports
1
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
210.87.97.90
10/10
Confidence
100%
Reports
152
ISP
PT Solusi Data ...
103.154.81.166
10/10
Confidence
100%
Reports
132
ISP
PT Mora Telemat...
160.22.240.235
10/10
Confidence
100%
Reports
126
ISP
PT Seeplus Medi...
103.10.120.8
10/10
Confidence
100%
Reports
67
ISP
PT Sumber Data ...
103.214.100.4
10/10
Confidence
100%
Reports
63
ISP
PT SURYA TEKNIK...
103.90.25.52
10/10
Confidence
100%
Reports
56
ISP
PT. Arana Tekno...
103.154.179.154
10/10
Confidence
100%
Reports
53
ISP
PT Aneka Teguh ...
103.164.57.37
10/10
Confidence
100%
Reports
46
ISP
PT Natha Buana ...
203.175.103.186
10/10
Confidence
100%
Reports
42
ISP
PT. Mitra Kita ...
103.228.8.165
10/10
Confidence
100%
Reports
41
ISP
INTERLINK TECHN...
210.79.142.201
10/10
Confidence
100%
Reports
40
ISP
PT Gayatri Lint...
103.162.69.11
8/10
Confidence
100%
Reports
35
ISP
Dinas Komunikas...
117.102.87.140
10/10
Confidence
100%
Reports
34
ISP
BIZNET NETWORKS
103.159.199.43
8/10
Confidence
100%
Reports
25
ISP
PT Mora Telemat...
103.154.137.43
8/10
Confidence
100%
Reports
25
ISP
PT Mora Telemat...
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
74%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a01:4f8:c012:4640::1
10/10
Confidence
74%
Reports
49,066
Location
DE
DE
207.90.244.27
8/10
Confidence
74%
Reports
16,336
Location
US
US
143.198.150.150
8/10
Confidence
74%
Reports
13,114
Location
US
US
164.92.82.91
8/10
Confidence
74%
Reports
12,469
Location
US
US
137.184.32.56
8/10
Confidence
74%
Reports
12,205
Location
US
US
64.23.214.73
8/10
Confidence
74%
Reports
12,188
Location
US
US
209.38.70.156
8/10
Confidence
74%
Reports
12,076
Location
US
US
146.190.153.30
8/10
Confidence
74%
Reports
12,046
Location
US
US
24.199.126.56
8/10
Confidence
74%
Reports
12,025
Location
US
US
209.38.131.131
8/10
Confidence
74%
Reports
11,516
Location
US
US
94.154.35.215
10/10
Confidence
74%
Reports
10,281
Location
NL
NL
139.59.170.85
8/10
Confidence
74%
Reports
8,676
Location
GB
GB
178.128.32.203
8/10
Confidence
74%
Reports
8,390
Location
GB
GB
176.65.149.212
10/10
Confidence
74%
Reports
6,424
Location
NL
NL
176.65.149.31
8/10
Confidence
74%
Reports
5,320
Location
NL
NL