IP Address

74.87.117.147

IPv4 Public
US US
AS10796
TWC-10796-MIDWEST
25 Reports
This IP is under Observation Suspicious activity detected - monitor closely
8/10 Threat
2% Confidence
25 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
US
US Location
TWC-10796-MIDWEST ASN 10796
25 Reports
Honeypot Data Source

Elevated Risk

Elevated threat level 8/10 for IP 74.87.117.147 from 25 reported incidents.

Behavioral profile indicates cyber threat activity with 2% confidence.

More threatening than 85% of monitored IPs

Threat Categories

SSH 25

Technical Details

SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.

Recommended Mitigations

Use key-based authentication, change default ports, implement fail2ban, and disable root login.

Moderate Network Risk

The network hosting this IP (ASN 10796, operated by TWC-10796-MIDWEST) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.

Consider the network context when assessing this individual IP.

Security Recommendations

Enhanced monitoring recommended. Review logs for interactions with this IP.

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 0/10 Inactive
Confidence Score 2% Low Confidence

Confidence History

27. Feb 2026 - 21. Apr 2026
2% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (25)

Date Categories Source Confidence
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot x2 75%

Technical Details

Basic Information

IP Address
74.87.117.147
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
US US
ASN
AS10796
ISP
TWC-10796-MIDWEST

DNS Information

Reverse DNS
mail.vjfoods.com
PTR Record
Yes
Connection Type
Static

Statistics

Total Reports
25
First Reported
27 Feb 2026
Last Reported
21 Apr 2026, 22:21

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS10796
Charter Communications Inc
US US

Network Threat Assessment

4/10
This network has low threat indicators with minimal suspicious activity.

Network Statistics

36
Total IPs Monitored
432
Total Reports
12
Reports per IP

Network Context

This IP address belongs to Charter Communications Inc (AS10796), which manages 36 IP addresses in our monitoring system. Out of these, 432 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.

Network notice: This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.

Comparative Analysis

How this IP compares to others in our threat intelligence database

85 %

Global Threat Ranking

This IP is more threatening than 85% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 806,172 reported IPs worldwide

Threat Level 8/10 avg: 6.3 +
Total Reports 25 avg: 9 ++

Network Comparison

Compared against 299 IPs in ASN 10796

Threat Level 8/10 network avg: 6.4 +
Total Reports 25 network avg: 9 ++
Network TWC-10796-MIDWEST has overall threat level 4/10

Geographic Comparison

Compared against 143,190 IPs in US

Threat Level 8/10 country avg: 6.8 +
Total Reports 25 country avg: 18 +
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

733,074 threat incidents tracked globally • Last 24h: 29,096 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US THIS IP
    143,172 19.5%
  2. 02
    BR
    Brazil BR
    110,717 15.1%
  3. 03
    IN
    India IN
    82,100 11.2%
  4. 04
    CN
    China CN
    44,720 6.1%
  5. 05
    SC
    SC SC
    29,233 4%
  6. 06
    DE
    Germany DE
    17,462 2.4%
  7. 07
    NL
    Netherlands NL
    17,449 2.4%
  8. 08
    PK
    Pakistan PK
    16,617 2.3%
  9. 09
    AR
    Argentina AR
    16,188 2.2%
  10. 10
    CO
    Colombia CO
    15,132 2.1%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
9.5/10 Avg Threat
57% Avg Confidence
20 High Threat
High-risk network: Majority of related IPs are flagged

IPs from the same subnet range, likely same network segment.

3 Related IPs
10/10 Avg Threat
37% Avg Confidence
3 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "74.87.117.147",
    "threat_level": 8,
    "confidence_score": 2,
    "total_reports": 25,
    "country_code": "US",
    "isp_name": "TWC-10796-MIDWEST",
    "asn": "10796",
    "first_reported": "2026-02-27 18:48:20",
    "last_reported": "2026-04-21 22:21:57",
    "exported_at": "2026-09-30T22:27:34+02:00",
    "source": "https://reportedip.com/ip/74.87.117.147/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.