Is IP address 217.199.161.196 dangerous?

Yes, 217.199.161.196 is considered dangerous with a threat level of 8/10. It has been reported 18 times for malicious activities including . We recommend blocking this IP address.

Who owns or operates IP address 217.199.161.196?

IP address 217.199.161.196 is operated by Heart Internet limited (ASN 20738) and is geolocated to GB. This information is derived from public WHOIS and geolocation databases.

Should I block IP address 217.199.161.196?

Yes, blocking 217.199.161.196 is strongly recommended. With a threat level of 8/10 and 18 security reports, this IP poses significant risk. Implement firewall rules to block incoming and outgoing traffic.

How accurate is this threat assessment for 217.199.161.196?

Our threat assessment for 217.199.161.196 has a confidence score of 15%, based on 18 independent reports from multiple independent sources. Higher confidence scores indicate more reliable assessments.

IP Address

217.199.161.196

IPv4 Public

AS20738

Heart Internet limited

18 Reports

Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

United Kingdom Location

Heart Internet limited ASN 20738

18 Reports

Mixed Data Source

Elevated Risk

Elevated threat level 8/10 for IP 217.199.161.196 from 18 reported incidents.

Behavioral profile indicates cyber threat activity with 15% confidence.

More threatening than 87% of monitored IPs

Threat Categories

Hacking 16

Brute-Force 10

WP Login Brute Force 8

DDoS Attack 5

Port Scan 4

WP XML-RPC Brute Force 4

Technical Details

General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.

Recommended Mitigations

Keep systems patched, implement intrusion detection, and follow security best practices.

Reputable Network

This IP is hosted on a network (ASN 20738) with generally good reputation. The ISP Heart Internet limited maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Enhanced monitoring recommended. Review logs for interactions with this IP.

Continue monitoring for emerging patterns.

Reputation Summary

Threat Level 8/10 High

Critical

Activity Frequency 0/10 Inactive

Confidence Score 12% Low Confidence

Confidence History

5. Jul 2026 - 16. Jul 2026

15% Current

Stable Trend

Date	Categories	Source	Confidence
16. Jul 2026	Hacking DDoS Attack	Community	75%
6. Jul 2026	Port Scan Hacking WP XML-RPC Brute Force +2	Honeypot x13	75%
6. Jul 2026	Hacking DDoS Attack	Community	75%
6. Jul 2026	Brute-Force	Community	75%
6. Jul 2026	Hacking DDoS Attack	Community	75%
6. Jul 2026	Port Scan Hacking WP XML-RPC Brute Force	Honeypot x8	75%
6. Jul 2026	Hacking Brute-Force WP Login Brute Force +2	Honeypot x13	75%
6. Jul 2026	Hacking DDoS Attack	Community	75%
6. Jul 2026	Hacking DDoS Attack	Community	75%
6. Jul 2026	Hacking WP Plugin Exploit WP User Enumeration	Honeypot x4	75%
6. Jul 2026	Hacking Brute-Force WP Login Brute Force	Honeypot	75%
6. Jul 2026	Port Scan Hacking WP XML-RPC Brute Force	Honeypot x4	75%
6. Jul 2026	Hacking Brute-Force WP Login Brute Force	Honeypot	75%
6. Jul 2026	Brute-Force	Community	75%
6. Jul 2026	Hacking Brute-Force WP Login Brute Force	Honeypot x5	75%
5. Jul 2026	Hacking Brute-Force WP Login Brute Force	Honeypot	75%
5. Jul 2026	Hacking Brute-Force WP Login Brute Force	Honeypot x5	75%
5. Jul 2026	Hacking Brute-Force WP Login Brute Force	Honeypot	75%