Critical Alert
Security alert: 213.195.222.5 rated 10/10 based on 33 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 100% of monitored IPs
IP Address
213.195.222.5
IPv4
Public
CZ
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Czechia
Location
ha-vel internet s.r.o.
ASN 15935
33
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
SSH
28
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
1. October 2026
Last Activity
2. October 2026
Recent (7 days)
33 incidents
Reputable Network
This IP is hosted on a network (ASN 15935) with generally good reputation. The ISP ha-vel internet s.r.o. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
2. Oct 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Exploited Host Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH | Honeypot | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking Exploited Host | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 213.195.222.5
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
CZ
- ASN
- AS15935
- ISP
- ha-vel internet s.r.o.
DNS Information
- Reverse DNS
- mailsrv.netmelnik.cz
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 33
- First Reported
- 1 Oct 2026
- Last Reported
- 2 Oct 2026, 15:32
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 813,734 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
33
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 15935
Threat Level
10/10
network avg: 10.0
=
Total Reports
33
network avg: 19
++
Geographic Comparison
Compared against 564 IPs in CZ
Threat Level
10/10
country avg: 6.7
+
Total Reports
33
country avg: 9
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Oct 2026
30 reports
Daily Average
1.1
reports/day
Most Active
Friday
30 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
32
SSH
31
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
739,755 threat incidents tracked globally • Last 24h: 43,994 Logs
FEED
Top Threat Sources
-
01
United States144,604 19.5% -
02
Brazil111,066 15%
-
03
India83,399 11.3%
-
04
China45,169 6.1%
-
05
SC29,242 4%
-
06
Germany17,739 2.4%
-
07
Netherlands17,586 2.4%
-
08
Pakistan16,939 2.3%
-
09
Argentina16,213 2.2%
-
10
Colombia15,149 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
10/10
Avg Threat
44%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.162.200.108
8/10
Confidence
100%
Reports
13
ISP
Martin Vicenik
95.182.95.43
8/10
Confidence
97%
Reports
10
ISP
Cloud Software ...
90.181.248.227
10/10
Confidence
96%
Reports
41
ISP
O2 Czech Republ...
103.119.19.143
8/10
Confidence
96%
Reports
17
ISP
Mastersoft S.R.L.
212.109.179.201
8/10
Confidence
96%
Reports
11
ISP
PODA a.s.
93.99.105.31
10/10
Confidence
94%
Reports
12
ISP
Vodafone Czech ...
95.182.95.28
8/10
Confidence
90%
Reports
12
ISP
Cloud Software ...
95.182.95.244
8/10
Confidence
90%
Reports
9
ISP
Cloud Software ...
93.99.105.9
8/10
Confidence
87%
Reports
9
ISP
Vodafone Czech ...
178.249.209.178
8/10
Confidence
86%
Reports
11
ISP
Datacamp Limited
78.44.192.210
10/10
Confidence
85%
Reports
150
ISP
Vodafone Czech ...
93.99.104.213
10/10
Confidence
84%
Reports
9
ISP
Vodafone Czech ...
90.176.62.112
10/10
Confidence
74%
Reports
9
ISP
O2 Czech Republ...
95.182.95.54
8/10
Confidence
73%
Reports
8
ISP
Cloud Software ...
213.235.142.131
8/10
Confidence
71%
Reports
21
ISP
CD-Telematika a.s.
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.136
10/10
Confidence
94%
Reports
4,450
Location
TW
TW
198.46.166.149
10/10
Confidence
94%
Reports
2,467
Location
US
US
157.245.176.4
10/10
Confidence
94%
Reports
2,041
Location
US
US
167.99.170.205
10/10
Confidence
94%
Reports
2,039
Location
US
US
192.253.248.215
10/10
Confidence
94%
Reports
1,757
Location
IR
IR
94.154.43.87
8/10
Confidence
94%
Reports
1,527
Location
TR
TR
192.253.248.251
10/10
Confidence
94%
Reports
1,487
Location
IR
IR
104.248.210.24
8/10
Confidence
94%
Reports
1,484
Location
US
US
47.132.122.17
10/10
Confidence
94%
Reports
1,253
Location
US
US
186.4.209.61
10/10
Confidence
94%
Reports
1,250
Location
EC
EC
195.182.16.23
10/10
Confidence
94%
Reports
1,169
Location
DE
DE
38.52.128.108
10/10
Confidence
94%
Reports
965
Location
BR
BR
213.209.159.16
10/10
Confidence
94%
Reports
827
Location
TW
TW
213.209.159.17
10/10
Confidence
94%
Reports
804
Location
TW
TW
76.236.228.92
10/10
Confidence
94%
Reports
803
Location
US
US