High Risk
IP 65.49.1.226 rated at threat level 8/10 based on 16 security reports.
Pattern analysis reveals concerning activity. Confidence: 64%.
More threatening than 91% of monitored IPs
IP Address
65.49.1.226
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
US
Location
HURRICANE
ASN 6939
16
Reports
Honeypot
Data Source
Threat Categories
Hacking
13
Port Scan
2
Web App Attack
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
15. October 2026
Last Activity
15. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 6939) with generally good reputation. The ISP HURRICANE maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
64%
High Confidence
Confidence History
23. Jan 2026 - 15. Oct 2026
64%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot x3 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 65.49.1.226
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS6939
- ISP
- HURRICANE
DNS Information
- Reverse DNS
- scan-78-04.shadowserver.io
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 16
- First Reported
- 23 Jan 2026
- Last Reported
- 15 Oct 2026, 10:35
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS6939
Hurricane Electric LLC
US
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1,007
Total IPs Monitored
42,571
Total Reports
42.3
Reports per IP
Network Context
This IP address belongs to Hurricane Electric LLC (AS6939), which manages 1,007 IP addresses in our monitoring system. Out of these, 42,571 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,099,821 reported IPs worldwide
Threat Level
8/10
avg: 6.1
+
Total Reports
16
avg: 8
++
Network Comparison
Compared against 1,052 IPs in ASN 6939
Threat Level
8/10
network avg: 8.6
=
Total Reports
16
network avg: 87
--
Network HURRICANE has overall threat level 1/10
Geographic Comparison
Compared against 188,085 IPs in US
Threat Level
8/10
country avg: 6.6
+
Total Reports
16
country avg: 17
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Thursday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
13
Port Scan
2
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,002,743 threat incidents tracked globally • Last 24h: 29,333 Logs
FEED
Top Threat Sources
-
01
Brazil194,294 19.4% -
02
United States188,085 18.8%
-
03
India95,230 9.5%
-
04
China47,952 4.8%
-
05
Argentina30,995 3.1%
-
06
SC29,345 2.9%
-
07
Mexico20,449 2%
-
08
Germany20,430 2%
-
09
Russia20,301 2%
-
10
Colombia20,252 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.1/10
Avg Threat
79%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
216.218.206.66
8/10
Confidence
82%
Reports
865
Location
US
US
216.218.206.69
8/10
Confidence
82%
Reports
762
Location
US
US
184.105.139.70
8/10
Confidence
81%
Reports
958
Location
US
US
64.62.156.222
8/10
Confidence
80%
Reports
1,109
Location
US
US
65.49.1.152
8/10
Confidence
80%
Reports
1,000
Location
US
US
74.82.47.4
8/10
Confidence
80%
Reports
976
Location
US
US
64.62.156.132
8/10
Confidence
80%
Reports
880
Location
US
US
64.62.156.202
8/10
Confidence
79%
Reports
1,006
Location
US
US
64.62.156.152
8/10
Confidence
79%
Reports
1,001
Location
US
US
64.62.156.108
8/10
Confidence
79%
Reports
998
Location
US
US
65.49.1.132
8/10
Confidence
79%
Reports
974
Location
US
US
74.82.47.2
8/10
Confidence
79%
Reports
883
Location
US
US
184.105.139.68
8/10
Confidence
79%
Reports
859
Location
US
US
64.62.156.182
8/10
Confidence
79%
Reports
815
Location
US
US
65.49.1.94
8/10
Confidence
79%
Reports
806
Location
US
US
184.105.247.196
8/10
Confidence
79%
Reports
780
Location
US
US
64.62.197.147
10/10
Confidence
79%
Reports
19
Location
US
US
65.49.20.69
8/10
Confidence
78%
Reports
1,094
Location
US
US
65.49.1.142
8/10
Confidence
78%
Reports
1,020
Location
US
US
65.49.1.232
8/10
Confidence
78%
Reports
987
Location
US
US
IPs from the same subnet range, likely same network segment.
20
Related IPs
8/10
Avg Threat
77%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
65.49.1.152
8/10
Confidence
80%
Reports
1,000
Location
US
US
65.49.1.132
8/10
Confidence
79%
Reports
974
Location
US
US
65.49.1.94
8/10
Confidence
79%
Reports
806
Location
US
US
65.49.1.142
8/10
Confidence
78%
Reports
1,020
Location
US
US
65.49.1.232
8/10
Confidence
78%
Reports
987
Location
US
US
65.49.1.80
8/10
Confidence
78%
Reports
941
Location
US
US
65.49.1.24
8/10
Confidence
78%
Reports
898
Location
US
US
65.49.1.222
8/10
Confidence
78%
Reports
849
Location
US
US
65.49.1.172
8/10
Confidence
77%
Reports
1,026
Location
US
US
65.49.1.10
8/10
Confidence
77%
Reports
1,017
Location
US
US
65.49.1.108
8/10
Confidence
77%
Reports
830
Location
US
US
65.49.1.212
8/10
Confidence
77%
Reports
728
Location
US
US
65.49.1.182
8/10
Confidence
76%
Reports
1,380
Location
US
US
65.49.1.162
8/10
Confidence
76%
Reports
1,043
Location
US
US
65.49.1.122
8/10
Confidence
76%
Reports
1,043
Location
US
US
65.49.1.192
8/10
Confidence
76%
Reports
1,012
Location
US
US
65.49.1.52
8/10
Confidence
76%
Reports
958
Location
US
US
65.49.1.202
8/10
Confidence
76%
Reports
946
Location
US
US
65.49.1.66
8/10
Confidence
74%
Reports
1,001
Location
US
US
65.49.1.38
8/10
Confidence
74%
Reports
785
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.70.67.198
8/10
Confidence
100%
Reports
80
ISP
Google LLC
2602:fa59:10:12f::1
10/10
Confidence
100%
Reports
44
ISP
RouterHosting LLC
136.71.31.178
8/10
Confidence
100%
Reports
41
ISP
Google LLC
136.70.242.68
8/10
Confidence
100%
Reports
40
ISP
Google LLC
166.62.41.13
10/10
Confidence
100%
Reports
33
ISP
GoDaddy.com, LLC
71.27.86.44
10/10
Confidence
100%
Reports
29
ISP
Comcast Cable C...
77.239.124.46
10/10
Confidence
100%
Reports
27
ISP
Banatsync Srl
159.223.97.218
10/10
Confidence
100%
Reports
26
ISP
DigitalOcean, LLC
136.70.235.57
8/10
Confidence
100%
Reports
23
ISP
Google LLC
34.53.37.173
8/10
Confidence
100%
Reports
23
ISP
Google LLC
136.0.39.68
10/10
Confidence
100%
Reports
23
ISP
CNServer LLC
129.121.99.2
10/10
Confidence
100%
Reports
22
ISP
Oracle Corporation
157.230.218.106
10/10
Confidence
100%
Reports
22
ISP
DigitalOcean, LLC
2601:243:2501:2f50:a651:73c0:5807:9399
10/10
Confidence
100%
Reports
21
ISP
Comcast Cable C...
144.225.187.68
10/10
Confidence
100%
Reports
21
ISP
CNServer LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9/10
Avg Threat
64%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
34.22.162.225
5/10
Confidence
64%
Reports
12
Location
BE
BE
45.8.19.221
10/10
Confidence
64%
Reports
32
Location
US
US
202.142.127.74
10/10
Confidence
64%
Reports
66
Location
IN
IN
47.84.199.26
10/10
Confidence
64%
Reports
13
Location
SG
SG
47.77.213.54
10/10
Confidence
64%
Reports
23
Location
US
US
13.222.228.146
8/10
Confidence
64%
Reports
9
Location
US
US
47.91.21.128
10/10
Confidence
64%
Reports
14
Location
JP
JP
65.49.1.223
8/10
Confidence
64%
Reports
34
Location
US
US
37.19.221.149
8/10
Confidence
64%
Reports
42
Location
US
US
47.84.106.205
10/10
Confidence
64%
Reports
11
Location
SG
SG
143.105.155.84
10/10
Confidence
64%
Reports
6
Location
SZ
SZ
2.50.139.180
10/10
Confidence
64%
Reports
10
Location
AE
AE
170.106.177.204
10/10
Confidence
64%
Reports
6
Location
US
US
134.33.66.248
8/10
Confidence
64%
Reports
8
Location
US
US
115.190.203.239
8/10
Confidence
64%
Reports
10
Location
CN
CN