High Risk
IP 81.167.26.57 rated at threat level 8/10 based on 22 security reports.
Pattern analysis reveals concerning activity. Confidence: 87%.
More threatening than 84% of monitored IPs
IP Address
81.167.26.57
IPv4
Public
NO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
NO
Location
Lyse Tele
ASN 29695
22
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
18
Hacking
4
Port Scan
3
Brute-Force
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 days indicates persistent threat actor operations.
First Observed
1. August 2026
Last Activity
3. August 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 29695) with generally good reputation. The ISP Lyse Tele maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
85%
Verified
Confidence History
7. Mar 2026 - 3. Aug 2026
87%
Current
Stable
Trend
Security Reports (22)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Port Scan Hacking | Honeypot | 75% | |
| Port Scan Hacking Brute-Force | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 81.167.26.57
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NO
- ASN
- AS29695
- ISP
- Lyse Tele
DNS Information
- Reverse DNS
- 57.81-167-26.customer.lyse.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 22
- First Reported
- 7 Mar 2026
- Last Reported
- 3 Aug 2026, 22:20
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS29695
Lyse Tele
NO
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
7
Total IPs Monitored
28
Total Reports
4
Reports per IP
Network Context
This IP address belongs to Lyse Tele (AS29695), which manages 7 IP addresses in our monitoring system. Out of these, 28 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 312,086 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
22
avg: 18
+
Network Comparison
Compared against 27 IPs in ASN 29695
Threat Level
8/10
network avg: 6.3
+
Total Reports
22
network avg: 3
++
Network Lyse Tele has overall threat level 3/10
Geographic Comparison
Compared against 242 IPs in NO
Threat Level
8/10
country avg: 6.3
+
Total Reports
22
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
1 Aug 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
18
Hacking
4
Port Scan
3
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
292,710 threat incidents tracked globally • Last 24h: 17,666 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,555 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.2/10
Avg Threat
35%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
92.220.94.157
8/10
Confidence
93%
Reports
17
Location
NO
NO
51.174.43.89
10/10
Confidence
53%
Reports
9
Location
NO
NO
109.247.190.45
10/10
Confidence
51%
Reports
4
Location
NO
NO
2a01:799:1856:f500:5dc2:896:dc3d:ede5
7/10
Confidence
40%
Reports
2
Location
NO
NO
2a01:799:1856:f500:4c8:1d60:b4fd:cc5c
7/10
Confidence
40%
Reports
2
Location
NO
NO
2a01:799:1856:f500:f520:da7b:b34f:9be
7/10
Confidence
40%
Reports
2
Location
NO
NO
2a01:799:1856:f500:518c:45f9:ee21:48e1
7/10
Confidence
40%
Reports
2
Location
NO
NO
51.174.123.24
7/10
Confidence
36%
Reports
2
Location
NO
NO
188.228.18.94
10/10
Confidence
31%
Reports
4
Location
DK
DK
79.160.38.194
0/10
Confidence
30%
Reports
1
Location
NO
NO
2a01:799:1856:f500:5039:dd1a:e82b:3b2
7/10
Confidence
29%
Reports
1
Location
NO
NO
2a01:799:1856:f500:f4be:62a2:410d:8a6c
7/10
Confidence
29%
Reports
1
Location
NO
NO
92.221.136.74
7/10
Confidence
26%
Reports
2
Location
NO
NO
2a01:799:1856:f500:854f:8733:42f8:7ba6
6/10
Confidence
23%
Reports
1
Location
NO
NO
2a01:799:1856:f500:6d37:ab65:2550:55
6/10
Confidence
23%
Reports
1
Location
NO
NO
2a01:799:1856:f500:1c45:5c4f:196:e3e
6/10
Confidence
23%
Reports
1
Location
NO
NO
2a01:799:1856:f500:49f9:ec52:b7d4:945
6/10
Confidence
23%
Reports
1
Location
NO
NO
79.161.110.92
0/10
Confidence
23%
Reports
1
Location
NO
NO
2a01:799:1856:f500:51fb:1b5f:53a2:bcfa
6/10
Confidence
23%
Reports
1
Location
NO
NO
109.247.84.190
0/10
Confidence
23%
Reports
1
Location
NO
NO
IPs from the same country with similar threat profiles.
15
Related IPs
9/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
20.100.172.37
8/10
Confidence
98%
Reports
14
ISP
Microsoft Corpo...
86.62.140.3
10/10
Confidence
94%
Reports
41
ISP
Globalconnect As
92.220.94.157
8/10
Confidence
93%
Reports
17
ISP
Lyse Tele
51.120.70.186
10/10
Confidence
93%
Reports
10
ISP
Microsoft Corpo...
20.100.193.33
8/10
Confidence
92%
Reports
11
ISP
Microsoft Corpo...
46.29.238.140
10/10
Confidence
91%
Reports
15
ISP
Global Connecti...
146.70.103.106
7/10
Confidence
91%
Reports
14
ISP
M247 Europe SRL
20.100.178.111
8/10
Confidence
91%
Reports
9
ISP
Microsoft Corpo...
185.12.59.118
10/10
Confidence
88%
Reports
386
ISP
Blix Solutions AS
20.100.186.69
8/10
Confidence
88%
Reports
9
ISP
Microsoft Corpo...
185.12.59.117
10/10
Confidence
85%
Reports
65
ISP
Blix Solutions AS
81.29.32.213
8/10
Confidence
84%
Reports
51
ISP
Globalconnect As
4.235.98.10
10/10
Confidence
83%
Reports
58
ISP
MICROSOFT-CORP-...
46.29.238.171
10/10
Confidence
79%
Reports
66
ISP
Global Connecti...
4.219.4.76
10/10
Confidence
78%
Reports
13
ISP
MICROSOFT-CORP-...
IPs with similar threat level and confidence scores.
15
Related IPs
8.6/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.246.128.133
10/10
Confidence
87%
Reports
8,226
Location
SE
SE
46.151.178.13
8/10
Confidence
87%
Reports
4,206
Location
NL
NL
45.205.1.5
10/10
Confidence
87%
Reports
3,981
Location
MU
MU
80.66.83.43
10/10
Confidence
87%
Reports
3,260
Location
RU
RU
3.130.168.2
8/10
Confidence
87%
Reports
2,568
Location
US
US
165.227.110.45
8/10
Confidence
87%
Reports
2,530
Location
US
US
137.184.112.192
8/10
Confidence
87%
Reports
2,337
Location
US
US
193.32.162.34
8/10
Confidence
87%
Reports
1,846
Location
RO
RO
62.60.130.169
7/10
Confidence
87%
Reports
1,527
Location
IR
IR
64.89.160.82
8/10
Confidence
87%
Reports
1,099
Location
GB
GB
81.29.142.100
8/10
Confidence
87%
Reports
978
Location
RU
RU
152.53.81.25
10/10
Confidence
87%
Reports
962
Location
US
US
204.76.203.213
10/10
Confidence
87%
Reports
817
Location
NL
NL
167.94.146.52
8/10
Confidence
87%
Reports
802
Location
US
US
81.168.83.103
8/10
Confidence
87%
Reports
723
Location
GB
GB