Extreme Threat
IP 220.158.184.112 classified at threat level 10/10 with 61 documented attacks.
Advanced threat indicators confirmed with 100% certainty.
More threatening than 100% of monitored IPs
IP Address
220.158.184.112
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
India
Location
Powergrid Teleservices Li...
ASN 132215
61
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
24
Brute-Force
6
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
8. September 2026
Last Activity
17. September 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 132215) with generally good reputation. The ISP Powergrid Teleservices Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
10. Sep 2026 - 17. Sep 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot x2 | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 220.158.184.112
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
IN
- ASN
- AS132215
- ISP
- Powergrid Teleservices Limited
DNS Information
- Reverse DNS
- mail.bbnlindia.net.in
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 61
- First Reported
- 8 Sep 2026
- Last Reported
- 17 Sep 2026, 22:05
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,428 reported IPs worldwide
Threat Level
10/10
avg: 5.8
++
Total Reports
61
avg: 9
++
Network Comparison
Compared against 12 IPs in ASN 132215
Threat Level
10/10
network avg: 6.5
++
Total Reports
61
network avg: 9
++
Geographic Comparison
Compared against 75,795 IPs in IN
Threat Level
10/10
country avg: 6.3
++
Total Reports
61
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Sep 2026
24 reports
Daily Average
2
reports/day
Most Active
Wednesday
24 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
56
Hacking
54
Brute-Force
6
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
698,119 threat incidents tracked globally • Last 24h: 22,766 Logs
FEED
Top Threat Sources
-
01
United States134,879 19.3% -
02
Brazil109,417 15.7%
-
03
India75,795 10.9%
-
04
China43,111 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,470 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,807 2.3%
-
09
Pakistan15,203 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
11
Related IPs
6.2/10
Avg Threat
46%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
111.235.68.114
8/10
Confidence
95%
Reports
11
Location
IN
IN
111.235.68.106
8/10
Confidence
84%
Reports
16
Location
IN
IN
103.59.140.34
10/10
Confidence
68%
Reports
8
Location
IN
IN
220.158.184.98
8/10
Confidence
54%
Reports
3
Location
IN
IN
103.200.88.114
7/10
Confidence
39%
Reports
2
Location
IN
IN
45.127.228.162
0/10
Confidence
36%
Reports
2
Location
IN
IN
103.200.78.43
7/10
Confidence
30%
Reports
1
Location
IN
IN
111.235.68.98
7/10
Confidence
30%
Reports
1
Location
IN
IN
58.84.20.146
7/10
Confidence
30%
Reports
1
Location
IN
IN
220.158.183.82
6/10
Confidence
22%
Reports
1
Location
IN
IN
103.200.76.92
0/10
Confidence
22%
Reports
1
Location
IN
IN
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
54%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
720
ISP
Micro Hosting P...
188.241.62.83
8/10
Confidence
100%
Reports
188
ISP
LEAPSWITCH NETW...
160.187.68.132
8/10
Confidence
100%
Reports
174
ISP
SHARSPIRE OPC P...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
103.179.111.84
10/10
Confidence
100%
Reports
160
ISP
Ishan's Network
182.77.62.24
8/10
Confidence
100%
Reports
88
ISP
Bharti Airtel L...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
160.187.54.114
10/10
Confidence
100%
Reports
78
ISP
Imegh Private L...
154.61.75.100
8/10
Confidence
100%
Reports
71
ISP
Facts Online Pv...
103.107.60.45
10/10
Confidence
100%
Reports
67
ISP
Greenworld Netc...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
103.19.136.6
8/10
Confidence
100%
Reports
60
ISP
YOTTA NETWORK S...
103.173.112.10
10/10
Confidence
100%
Reports
59
ISP
SIXTH STAR TECH...
68.183.95.102
10/10
Confidence
100%
Reports
56
ISP
DigitalOcean, LLC
103.148.165.50
10/10
Confidence
100%
Reports
55
ISP
Net for Choice
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.137
10/10
Confidence
100%
Reports
1,449
Location
BG
BG
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
213.177.179.195
10/10
Confidence
100%
Reports
701
Location
TW
TW
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
601
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
213.209.159.208
10/10
Confidence
100%
Reports
540
Location
DE
DE
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
45.148.10.204
8/10
Confidence
100%
Reports
509
Location
NL
NL
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
195.178.110.217
10/10
Confidence
100%
Reports
382
Location
BG
BG
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2