Critical Alert
Security alert: 23.175.50.52 rated 10/10 based on 529 verified incidents.
Threat profile indicates sustained malicious activity with 83% confidence rating.
More threatening than 99% of monitored IPs
IP Address
23.175.50.52
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
United States
Location
Ethernic LLC
ASN 398357
529
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
SSH
29
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
19. September 2026
Last Activity
21. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 398357) with generally good reputation. The ISP Ethernic LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
83%
Verified
Confidence History
20. Sep 2026 - 21. Sep 2026
83%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 23.175.50.52
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS398357
- ISP
- Ethernic LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 529
- First Reported
- 12 Jul 2026
- Last Reported
- 21 Sep 2026, 04:02
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 807,035 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
529
avg: 9
++
Network Comparison
Compared against 3 IPs in ASN 398357
Threat Level
10/10
network avg: 7.0
+
Total Reports
529
network avg: 180
++
Geographic Comparison
Compared against 143,419 IPs in US
Threat Level
10/10
country avg: 6.8
+
Total Reports
529
country avg: 18
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 Sep 2026
55 reports
Daily Average
3.8
reports/day
Most Active
Saturday
125 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
520
SSH
485
Exploited Host
38
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 30 reports
Weekly Activity
Geographic Threat Distribution
733,831 threat incidents tracked globally • Last 24h: 28,326 Logs
FEED
Top Threat Sources
-
01
United States143,366 19.5% -
02
Brazil110,774 15.1%
-
03
India82,141 11.2%
-
04
China44,777 6.1%
-
05
SC29,233 4%
-
06
Germany17,498 2.4%
-
07
Netherlands17,483 2.4%
-
08
Pakistan16,651 2.3%
-
09
Argentina16,190 2.2%
-
10
Colombia15,136 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
5.5/10
Avg Threat
49%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
74
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
136.67.210.104
10/10
Confidence
100%
Reports
55
ISP
Google LLC
136.90.20.127
10/10
Confidence
100%
Reports
52
ISP
Google LLC
136.67.214.14
10/10
Confidence
100%
Reports
50
ISP
Google LLC
136.90.24.194
8/10
Confidence
100%
Reports
47
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.131.220.121
8/10
Confidence
83%
Reports
2,762
Location
US
US
167.94.146.51
8/10
Confidence
83%
Reports
1,063
Location
US
US
192.253.248.229
7/10
Confidence
83%
Reports
856
Location
IR
IR
91.224.92.28
10/10
Confidence
83%
Reports
792
Location
GB
GB
216.218.206.69
8/10
Confidence
83%
Reports
692
Location
US
US
91.196.152.208
10/10
Confidence
83%
Reports
387
Location
FR
FR
91.196.152.177
10/10
Confidence
83%
Reports
369
Location
FR
FR
171.25.158.47
10/10
Confidence
83%
Reports
304
Location
SE
SE
66.132.172.136
8/10
Confidence
83%
Reports
304
Location
US
US
66.132.172.205
8/10
Confidence
83%
Reports
300
Location
US
US
195.184.76.236
10/10
Confidence
83%
Reports
297
Location
US
US
195.184.76.15
10/10
Confidence
83%
Reports
290
Location
US
US
195.184.76.99
10/10
Confidence
83%
Reports
282
Location
US
US
91.230.168.53
10/10
Confidence
83%
Reports
278
Location
US
US
195.184.76.235
10/10
Confidence
83%
Reports
277
Location
US
US