Elevated Risk
Elevated threat level 8/10 for IP 5.188.16.97 from 10 reported incidents.
Behavioral profile indicates cyber threat activity with 92% confidence.
More threatening than 90% of monitored IPs
IP Address
5.188.16.97
IPv4
Public
EE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Estonia
Location
Cloud.dog Ou
ASN 198068
10
Reports
Honeypot
Data Source
Threat Categories
SSH
10
Brute-Force
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
30. August 2026
Last Activity
19. September 2026
Recent (7 days)
3 incidents
High-Risk Network Association
This IP belongs to a network (ASN 198068) with elevated threat levels. The ISP Cloud.dog Ou hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
92%
Verified
Confidence History
30. Aug 2026 - 19. Sep 2026
92%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.188.16.97
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
EE
- ASN
- AS198068
- ISP
- Cloud.dog Ou
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 30 Aug 2026
- Last Reported
- 19 Sep 2026, 11:43
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS198068
P.a.g.m. Ou
EE
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
3
Total IPs Monitored
9
Total Reports
3
Reports per IP
Network Context
This IP address belongs to P.a.g.m. Ou (AS198068), which manages 3 IP addresses in our monitoring system. Out of these, 9 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 768,175 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
10
avg: 9
=
Network Comparison
Compared against 9 IPs in ASN 198068
Threat Level
8/10
network avg: 7.0
=
Total Reports
10
network avg: 3
++
Network Cloud.dog Ou has overall threat level 7/10
Geographic Comparison
Compared against 315 IPs in EE
Threat Level
8/10
country avg: 5.7
+
Total Reports
10
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Aug 2026
4 reports
Daily Average
0.3
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
10
Brute-Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
698,748 threat incidents tracked globally • Last 24h: 23,740 Logs
FEED
Top Threat Sources
-
01
United States135,065 19.3% -
02
Brazil109,443 15.7%
-
03
India75,815 10.9%
-
04
China43,139 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,483 2.4%
-
07
Argentina16,068 2.3%
-
08
Germany15,836 2.3%
-
09
Pakistan15,223 2.2%
-
10
Colombia15,077 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
8
Related IPs
6.9/10
Avg Threat
33%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
5.101.119.84
10/10
Confidence
56%
Reports
4
Location
EE
EE
45.67.131.229
10/10
Confidence
51%
Reports
3
Location
EE
EE
5.45.114.238
0/10
Confidence
36%
Reports
2
Location
EE
EE
2a03:f480:1:d::49
8/10
Confidence
31%
Reports
6
Location
EE
EE
5.101.114.139
7/10
Confidence
30%
Reports
1
Location
EE
EE
5.45.112.76
7/10
Confidence
29%
Reports
1
Location
EE
EE
5.45.121.230
7/10
Confidence
29%
Reports
1
Location
EE
EE
5.101.180.40
6/10
Confidence
4%
Reports
2
Location
EE
EE
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
79%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
64.188.78.34
8/10
Confidence
97%
Reports
21
ISP
Oc Networks Lim...
213.35.128.24
8/10
Confidence
93%
Reports
21
ISP
Telia Eesti AS
193.42.112.41
10/10
Confidence
93%
Reports
10
ISP
HexCore cloud s...
165.231.143.109
10/10
Confidence
93%
Reports
10
ISP
Angelnet Limited
109.206.241.199
10/10
Confidence
89%
Reports
106
ISP
Baykov Ilya Ser...
109.172.8.83
10/10
Confidence
79%
Reports
247
ISP
SmartApe OU
185.73.124.28
10/10
Confidence
78%
Reports
400
ISP
Soldatov Alexey...
69.12.83.27
10/10
Confidence
75%
Reports
70
ISP
HostSlim B.V.
69.12.83.39
10/10
Confidence
75%
Reports
58
ISP
HostSlim B.V.
95.85.245.10
8/10
Confidence
73%
Reports
18
ISP
Oc Networks Lim...
69.12.83.46
8/10
Confidence
72%
Reports
56
ISP
HostSlim B.V.
84.50.142.247
8/10
Confidence
72%
Reports
43
ISP
Telia Eesti AS
80.79.113.226
10/10
Confidence
68%
Reports
8
ISP
Aktsiaselts Wav...
194.127.167.70
10/10
Confidence
67%
Reports
12
ISP
Owl Limited
185.170.144.3
10/10
Confidence
64%
Reports
93
ISP
Xhost Internet ...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.148.84
10/10
Confidence
92%
Reports
5,669
Location
NL
NL
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
78.142.18.172
8/10
Confidence
92%
Reports
1,735
Location
BG
BG
106.75.157.47
10/10
Confidence
92%
Reports
939
Location
CN
CN
106.75.156.189
10/10
Confidence
92%
Reports
935
Location
CN
CN
87.106.98.147
8/10
Confidence
92%
Reports
802
Location
DE
DE
217.160.24.45
8/10
Confidence
92%
Reports
777
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
743
Location
DE
DE
185.132.46.108
8/10
Confidence
92%
Reports
740
Location
DE
DE
77.91.97.123
8/10
Confidence
92%
Reports
708
Location
GE
GE
87.106.189.67
8/10
Confidence
92%
Reports
689
Location
DE
DE
87.106.206.249
8/10
Confidence
92%
Reports
645
Location
DE
DE
87.106.141.148
8/10
Confidence
92%
Reports
535
Location
DE
DE
217.160.24.49
8/10
Confidence
92%
Reports
505
Location
DE
DE
160.119.76.210
8/10
Confidence
92%
Reports
452
Location
SC
SC
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2