Critical Alert
Security alert: 109.205.61.79 rated 10/10 based on 74 verified incidents.
Threat profile indicates sustained malicious activity with 63% confidence rating.
More threatening than 91% of monitored IPs
IP Address
109.205.61.79
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
US
Location
HOSTHATCH
ASN 63473
74
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 63473, operated by HOSTHATCH) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
59%
High Confidence
Confidence History
29. Sep 2025
63%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 109.205.61.79
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS63473
- ISP
- HOSTHATCH
DNS Information
- Reverse DNS
- darkuf.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 74
- First Reported
- 29 Sep 2025
- Last Reported
- 29 Sep 2025, 14:03
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS63473
HostHatch, LLC
NL
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
10
Total IPs Monitored
287
Total Reports
28.7
Reports per IP
Network Context
This IP address belongs to HostHatch, LLC (AS63473), which manages 10 IP addresses in our monitoring system. Out of these, 287 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,817 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
74
avg: 23
++
Network Comparison
Compared against 20 IPs in ASN 63473
Threat Level
10/10
network avg: 5.4
++
Total Reports
74
network avg: 16
++
Network HOSTHATCH has overall threat level 5/10
Geographic Comparison
Compared against 38,480 IPs in US
Threat Level
10/10
country avg: 5.9
++
Total Reports
74
country avg: 41
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
74 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
74
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 25 reports
Weekly Activity
Geographic Threat Distribution
187,517 threat incidents tracked globally • Last 24h: 19,025 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5%
-
02
India29,193 15.6% -
03
China26,035 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,146 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
19
Related IPs
5.1/10
Avg Threat
44%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
176.126.85.194
10/10
Confidence
94%
Reports
178
Location
NL
NL
103.167.151.157
8/10
Confidence
75%
Reports
7
Location
SG
SG
103.167.151.249
8/10
Confidence
68%
Reports
8
Location
SG
SG
103.214.23.42
8/10
Confidence
67%
Reports
15
Location
SG
SG
45.132.75.45
8/10
Confidence
59%
Reports
3
Location
SG
SG
150.107.201.232
10/10
Confidence
56%
Reports
4
Location
GB
GB
45.132.75.133
8/10
Confidence
49%
Reports
3
Location
SG
SG
31.220.43.63
0/10
Confidence
40%
Reports
2
Location
NL
NL
185.223.207.28
8/10
Confidence
35%
Reports
4
Location
SG
SG
31.220.42.247
0/10
Confidence
30%
Reports
1
Location
NL
NL
83.138.53.180
0/10
Confidence
30%
Reports
1
Location
NL
NL
153.92.126.226
0/10
Confidence
30%
Reports
1
Location
SE
SE
77.90.35.171
7/10
Confidence
30%
Reports
1
Location
AU
AU
216.250.97.143
0/10
Confidence
30%
Reports
1
Location
HK
HK
31.220.15.235
7/10
Confidence
30%
Reports
1
Location
SE
SE
153.92.126.206
0/10
Confidence
30%
Reports
1
Location
SE
SE
31.220.42.45
0/10
Confidence
29%
Reports
1
Location
NL
NL
185.126.82.201
8/10
Confidence
28%
Reports
16
Location
US
US
103.167.150.158
7/10
Confidence
25%
Reports
2
Location
SG
SG
IPs from the same country with similar threat profiles.
15
Related IPs
8.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
176
ISP
Limestone Netwo...
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
162.241.152.21
8/10
Confidence
100%
Reports
126
ISP
Network Solutio...
38.95.35.74
8/10
Confidence
100%
Reports
112
ISP
Limestone Netwo...
50.6.169.131
8/10
Confidence
100%
Reports
106
ISP
Network Solutio...
162.214.206.32
10/10
Confidence
100%
Reports
98
ISP
Unified Layer
152.32.148.250
7/10
Confidence
100%
Reports
88
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.130.96.91
8/10
Confidence
63%
Reports
43,462
Location
US
US
3.134.148.59
8/10
Confidence
63%
Reports
14,980
Location
US
US
92.118.39.87
10/10
Confidence
63%
Reports
14,713
Location
US
US
87.120.191.13
10/10
Confidence
63%
Reports
13,131
Location
US
US
3.137.73.221
8/10
Confidence
63%
Reports
10,228
Location
US
US
3.132.23.201
8/10
Confidence
63%
Reports
9,576
Location
US
US
3.149.59.26
8/10
Confidence
63%
Reports
8,795
Location
US
US
167.250.224.25
10/10
Confidence
63%
Reports
8,244
Location
BR
BR
176.117.107.74
10/10
Confidence
63%
Reports
5,739
Location
NL
NL
142.202.188.211
10/10
Confidence
63%
Reports
4,136
Location
US
US
176.117.107.91
10/10
Confidence
63%
Reports
3,994
Location
NL
NL
196.251.70.234
10/10
Confidence
63%
Reports
3,796
Location
SC
SC
45.88.186.70
8/10
Confidence
63%
Reports
3,632
Location
NL
NL
2.57.122.209
10/10
Confidence
63%
Reports
2,573
Location
RO
RO
64.188.91.248
10/10
Confidence
63%
Reports
2,232
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203