High Risk
IP 176.65.139.236 rated at threat level 8/10 based on 14 security reports.
Pattern analysis reveals concerning activity. Confidence: 99%.
More threatening than 83% of monitored IPs
IP Address
176.65.139.236
IPv4
Public
LU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Luxembourg
Location
Offshore LC
ASN 214472
14
Reports
Mixed
Data Source
Threat Categories
WP Config Exposure
14
Port Scan
9
Hacking
9
WP Version Scanning
5
WP Plugin Scanning
5
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
1. June 2026
Last Activity
22. June 2026
Recent (7 days)
8 incidents
Reputable Network
This IP is hosted on a network (ASN 214472) with generally good reputation. The ISP Offshore LC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
99%
Verified
Confidence History
1. Jun 2026 - 22. Jun 2026
99%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan Hacking WP Config Exposure | Honeypot x9 | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Port Scan Hacking WP Config Exposure | Honeypot | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 176.65.139.236
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
LU
- ASN
- AS214472
- ISP
- Offshore LC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 1 Jun 2026
- Last Reported
- 22 Jun 2026, 02:51
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 229,080 reported IPs worldwide
Threat Level
8/10
avg: 5.6
+
Total Reports
14
avg: 21
-
Network Comparison
Compared against 72 IPs in ASN 214472
Threat Level
8/10
network avg: 8.5
=
Total Reports
14
network avg: 29
--
Geographic Comparison
Compared against 191 IPs in LU
Threat Level
8/10
country avg: 7.1
=
Total Reports
14
country avg: 22
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Jun 2026
8 reports
Daily Average
0.5
reports/day
Most Active
Monday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Config Exposure
14
Port Scan
9
Hacking
9
WP Plugin Scanning
5
WP Version Scanning
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
214,713 threat incidents tracked globally • Last 24h: 17,405 Logs
FEED
Top Threat Sources
-
01
United States44,123 20.5% -
02
India34,910 16.3% -
03
China28,586 13.3% -
04
Brazil11,565 5.4% -
05
Germany8,144 3.8% -
06
Singapore6,984 3.3% -
07
Indonesia6,373 3% -
08
Pakistan5,781 2.7% -
09
Russia5,345 2.5% -
10
Netherlands4,888 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
10/10
Avg Threat
92%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.181
10/10
Confidence
100%
Reports
532
Location
LU
LU
176.65.139.103
10/10
Confidence
94%
Reports
536
Location
LU
LU
176.65.139.36
10/10
Confidence
94%
Reports
80
Location
LU
LU
176.65.139.177
10/10
Confidence
94%
Reports
63
Location
LU
LU
176.65.139.188
10/10
Confidence
94%
Reports
62
Location
LU
LU
176.65.139.56
10/10
Confidence
94%
Reports
55
Location
LU
LU
176.65.139.87
10/10
Confidence
94%
Reports
49
Location
LU
LU
176.65.139.99
10/10
Confidence
94%
Reports
30
Location
LU
LU
176.65.139.151
10/10
Confidence
94%
Reports
29
Location
LU
LU
176.65.139.169
10/10
Confidence
94%
Reports
26
Location
LU
LU
176.65.139.173
10/10
Confidence
94%
Reports
25
Location
LU
LU
176.65.139.165
10/10
Confidence
94%
Reports
25
Location
LU
LU
176.65.139.131
10/10
Confidence
94%
Reports
23
Location
LU
LU
176.65.139.48
10/10
Confidence
94%
Reports
19
Location
LU
LU
176.65.139.126
10/10
Confidence
93%
Reports
62
Location
LU
LU
176.65.139.198
10/10
Confidence
92%
Reports
13
Location
LU
LU
176.65.139.27
10/10
Confidence
87%
Reports
92
Location
LU
LU
176.65.139.61
10/10
Confidence
85%
Reports
18
Location
LU
LU
176.65.139.174
10/10
Confidence
85%
Reports
11
Location
LU
LU
176.65.139.195
10/10
Confidence
85%
Reports
11
Location
LU
LU
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.7/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.181
10/10
Confidence
100%
Reports
532
Location
LU
LU
176.65.139.8
8/10
Confidence
96%
Reports
268
Location
DE
DE
176.65.139.140
8/10
Confidence
96%
Reports
261
Location
DE
DE
176.65.139.156
10/10
Confidence
94%
Reports
1,152
Location
DE
DE
176.65.139.64
10/10
Confidence
94%
Reports
744
Location
DE
DE
176.65.139.103
10/10
Confidence
94%
Reports
536
Location
LU
LU
176.65.139.11
10/10
Confidence
94%
Reports
201
Location
DE
DE
176.65.139.31
10/10
Confidence
94%
Reports
178
Location
DE
DE
176.65.139.66
10/10
Confidence
94%
Reports
143
Location
DE
DE
176.65.139.118
10/10
Confidence
94%
Reports
125
Location
DE
DE
176.65.139.130
10/10
Confidence
94%
Reports
119
Location
DE
DE
176.65.139.101
10/10
Confidence
94%
Reports
96
Location
DE
DE
176.65.139.36
10/10
Confidence
94%
Reports
80
Location
LU
LU
176.65.139.254
10/10
Confidence
94%
Reports
63
Location
DE
DE
176.65.139.177
10/10
Confidence
94%
Reports
63
Location
LU
LU
176.65.139.188
10/10
Confidence
94%
Reports
62
Location
LU
LU
176.65.139.56
10/10
Confidence
94%
Reports
55
Location
LU
LU
176.65.139.23
8/10
Confidence
94%
Reports
51
Location
GB
GB
176.65.139.93
10/10
Confidence
94%
Reports
49
Location
DE
DE
176.65.139.87
10/10
Confidence
94%
Reports
49
Location
LU
LU
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.181
10/10
Confidence
100%
Reports
532
ISP
Offshore LC
107.189.1.82
10/10
Confidence
99%
Reports
17
ISP
FranTech Solutions
107.189.1.176
8/10
Confidence
97%
Reports
41
ISP
PONYNET
176.65.139.103
10/10
Confidence
94%
Reports
536
ISP
Offshore LC
176.65.139.36
10/10
Confidence
94%
Reports
80
ISP
Offshore LC
176.65.139.177
10/10
Confidence
94%
Reports
63
ISP
Offshore LC
176.65.139.188
10/10
Confidence
94%
Reports
62
ISP
Offshore LC
176.65.139.56
10/10
Confidence
94%
Reports
55
ISP
Offshore LC
176.65.139.87
10/10
Confidence
94%
Reports
49
ISP
Offshore LC
107.189.30.132
10/10
Confidence
94%
Reports
33
ISP
FranTech Solutions
176.65.139.99
10/10
Confidence
94%
Reports
30
ISP
Offshore LC
176.65.139.151
10/10
Confidence
94%
Reports
29
ISP
Offshore LC
176.65.139.169
10/10
Confidence
94%
Reports
26
ISP
Offshore LC
176.65.139.173
10/10
Confidence
94%
Reports
25
ISP
Offshore LC
176.65.139.165
10/10
Confidence
94%
Reports
25
ISP
Offshore LC
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.198.224.141
8/10
Confidence
99%
Reports
492
Location
US
US
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
146.70.194.238
8/10
Confidence
99%
Reports
314
Location
FR
FR
85.204.70.106
8/10
Confidence
99%
Reports
281
Location
FR
FR
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP
87.121.84.81
8/10
Confidence
99%
Reports
152
Location
US
US
121.168.139.251
10/10
Confidence
99%
Reports
146
Location
KR
KR
38.95.35.85
8/10
Confidence
99%
Reports
133
Location
US
US
93.14.117.117
10/10
Confidence
99%
Reports
119
Location
FR
FR
81.60.209.168
10/10
Confidence
99%
Reports
115
Location
ES
ES
196.189.237.92
10/10
Confidence
99%
Reports
111
Location
ET
ET
34.39.58.191
8/10
Confidence
99%
Reports
108
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 164.92.82.91
- 137.184.32.56
- 64.23.214.73
- 146.190.153.30
- 24.199.126.56
- 209.38.70.156
- 143.198.225.197
- 172.110.223.33
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.64
- 193.32.162.28
- 80.94.92.183
- 176.65.149.224
- 178.128.32.203
- 176.65.149.230
- 176.65.149.220
- 176.65.149.67
- 176.65.149.55
- 176.65.149.212
- 176.65.149.27