Notable Threat
IP 172.105.128.11 rated 8/10 from 49 verified reports.
Multiple security incidents attributed to this IP. Confidence: 89%.
More threatening than 81% of monitored IPs
IP Address
172.105.128.11
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
US
Location
Akamai Connected Cloud
ASN 63949
49
Reports
Mixed
Data Source
Threat Categories
Hacking
28
Port Scan
1
DDoS Attack
1
WP Cron Abuse
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
20. May 2026
Last Activity
31. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 63949) with generally good reputation. The ISP Akamai Connected Cloud maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
80%
Verified
Confidence History
6. Feb 2026 - 31. May 2026
89%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 172.105.128.11
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS63949
- ISP
- Akamai Connected Cloud
DNS Information
- Reverse DNS
- oslo.scan.bufferover.run
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 49
- First Reported
- 15 Aug 2025
- Last Reported
- 31 May 2026, 00:22
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS63949
Akamai Connected Cloud
US
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
652
Total IPs Monitored
15,636
Total Reports
24
Reports per IP
Network Context
This IP address belongs to Akamai Connected Cloud (AS63949), which manages 652 IP addresses in our monitoring system. Out of these, 15,636 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,048 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
49
avg: 23
++
Network Comparison
Compared against 1,017 IPs in ASN 63949
Threat Level
8/10
network avg: 5.6
+
Total Reports
49
network avg: 13
++
Network Akamai Connected Cloud has overall threat level 1/10
Geographic Comparison
Compared against 38,406 IPs in US
Threat Level
8/10
country avg: 5.9
+
Total Reports
49
country avg: 41
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 May 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Thursday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
47
WP Cron Abuse
1
DDoS Attack
1
Port Scan
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
186,810 threat incidents tracked globally • Last 24h: 18,742 Logs
FEED
Top Threat Sources
-
01
United States38,406 20.6%
-
02
India28,884 15.5% -
03
China25,995 13.9% -
04
Brazil10,233 5.5% -
05
Germany7,137 3.8% -
06
Singapore6,471 3.5% -
07
Indonesia5,516 3% -
08
Russia4,700 2.5% -
09
Pakistan4,642 2.5% -
10
Netherlands4,354 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
172.236.60.243
8/10
Confidence
99%
Reports
52
Location
AU
AU
45.33.112.95
10/10
Confidence
96%
Reports
96
Location
US
US
66.228.53.174
10/10
Confidence
96%
Reports
42
Location
US
US
172.232.108.36
10/10
Confidence
96%
Reports
39
Location
IN
IN
178.79.173.199
8/10
Confidence
96%
Reports
11
Location
GB
GB
45.33.110.172
10/10
Confidence
94%
Reports
299
Location
US
US
172.234.231.111
10/10
Confidence
94%
Reports
57
Location
US
US
172.236.119.165
8/10
Confidence
94%
Reports
56
Location
US
US
66.228.53.136
10/10
Confidence
94%
Reports
54
Location
US
US
23.92.30.103
10/10
Confidence
94%
Reports
51
Location
US
US
45.79.181.223
10/10
Confidence
94%
Reports
47
Location
US
US
66.228.53.46
10/10
Confidence
94%
Reports
44
Location
US
US
173.255.229.153
10/10
Confidence
94%
Reports
38
Location
US
US
173.255.229.76
10/10
Confidence
94%
Reports
37
Location
US
US
45.79.67.140
10/10
Confidence
94%
Reports
36
Location
US
US
198.74.56.135
10/10
Confidence
94%
Reports
35
Location
US
US
172.236.19.204
10/10
Confidence
94%
Reports
33
Location
GB
GB
45.33.46.249
10/10
Confidence
94%
Reports
32
Location
US
US
45.79.190.104
10/10
Confidence
94%
Reports
27
Location
US
US
45.56.115.14
10/10
Confidence
94%
Reports
26
Location
US
US
IPs from the same subnet range, likely same network segment.
2
Related IPs
10/10
Avg Threat
78%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
208.109.188.137
8/10
Confidence
100%
Reports
513
ISP
GO-DADDY-COM-LLC
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
176
ISP
Limestone Netwo...
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
162.241.152.21
8/10
Confidence
100%
Reports
126
ISP
Network Solutio...
38.95.35.74
8/10
Confidence
100%
Reports
112
ISP
Limestone Netwo...
50.6.169.131
8/10
Confidence
100%
Reports
106
ISP
Network Solutio...
162.214.206.32
10/10
Confidence
100%
Reports
98
ISP
Unified Layer
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
152.32.170.55
10/10
Confidence
89%
Reports
2,146
Location
HK
HK
165.227.188.42
8/10
Confidence
89%
Reports
1,537
Location
US
US
165.227.110.45
8/10
Confidence
89%
Reports
1,513
Location
US
US
137.184.112.103
8/10
Confidence
89%
Reports
1,469
Location
US
US
92.63.197.77
8/10
Confidence
89%
Reports
635
Location
UA
UA
45.153.34.32
10/10
Confidence
89%
Reports
621
Location
NL
NL
45.91.64.6
8/10
Confidence
89%
Reports
553
Location
RU
RU
206.189.106.82
8/10
Confidence
89%
Reports
477
Location
NL
NL
80.82.70.133
10/10
Confidence
89%
Reports
440
Location
SC
SC
184.105.247.252
10/10
Confidence
89%
Reports
437
Location
US
US
64.62.197.152
8/10
Confidence
89%
Reports
419
Location
US
US
65.49.1.212
10/10
Confidence
89%
Reports
365
Location
US
US
185.50.38.135
10/10
Confidence
89%
Reports
267
Location
IR
IR
165.227.18.206
10/10
Confidence
89%
Reports
227
Location
US
US
36.111.150.151
10/10
Confidence
89%
Reports
221
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203