Notable Threat
IP 185.208.159.129 rated 8/10 from 33 verified reports.
Multiple security incidents attributed to this IP. Confidence: 72%.
More threatening than 79% of monitored IPs
IP Address
185.208.159.129
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
US
Location
Global-Data System IT Cor...
ASN 42624
33
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 42624) with generally good reputation. The ISP Global-Data System IT Corporation maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
67%
High Confidence
Confidence History
23. Feb 2026 - 28. Feb 2026
72%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x4 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.208.159.129
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS42624
- ISP
- Global-Data System IT Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 33
- First Reported
- 20 Feb 2026
- Last Reported
- 28 Feb 2026, 21:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS42624
Global-Data System IT Corporation
SC
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
102
Total IPs Monitored
10,482
Total Reports
102.8
Reports per IP
Network Context
This IP address belongs to Global-Data System IT Corporation (AS42624), which manages 102 IP addresses in our monitoring system. Out of these, 10,482 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 198,898 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
33
avg: 23
+
Network Comparison
Compared against 102 IPs in ASN 42624
Threat Level
8/10
network avg: 6.4
+
Total Reports
33
network avg: 96
--
Network Global-Data System IT Corporation has overall threat level 3/10
Geographic Comparison
Compared against 38,381 IPs in US
Threat Level
8/10
country avg: 5.9
+
Total Reports
33
country avg: 41
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
33
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 19:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
186,611 threat incidents tracked globally • Last 24h: 18,640 Logs
FEED
Top Threat Sources
-
01
United States38,356 20.6%
-
02
India28,860 15.5% -
03
China25,979 13.9% -
04
Brazil10,218 5.5% -
05
Germany7,134 3.8% -
06
Singapore6,460 3.5% -
07
Indonesia5,500 2.9% -
08
Russia4,698 2.5% -
09
Pakistan4,635 2.5% -
10
Netherlands4,351 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
89%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
185.196.9.127
8/10
Confidence
100%
Reports
157
Location
GB
GB
212.11.64.25
8/10
Confidence
97%
Reports
49
Location
SC
SC
185.196.11.208
8/10
Confidence
97%
Reports
48
Location
CH
CH
212.11.64.155
8/10
Confidence
97%
Reports
42
Location
SC
SC
185.196.9.22
8/10
Confidence
97%
Reports
31
Location
GB
GB
69.5.189.125
8/10
Confidence
97%
Reports
26
Location
SC
SC
185.196.10.182
8/10
Confidence
97%
Reports
22
Location
GB
GB
69.5.189.131
8/10
Confidence
97%
Reports
21
Location
SC
SC
185.196.11.160
8/10
Confidence
97%
Reports
18
Location
CH
CH
185.208.159.146
8/10
Confidence
97%
Reports
15
Location
US
US
86.54.42.199
10/10
Confidence
94%
Reports
293
Location
SC
SC
86.54.42.148
8/10
Confidence
93%
Reports
20
Location
SC
SC
185.196.8.147
8/10
Confidence
88%
Reports
16
Location
CH
CH
185.196.10.227
10/10
Confidence
78%
Reports
44
Location
GB
GB
185.208.159.123
8/10
Confidence
77%
Reports
8
Location
US
US
212.11.64.156
10/10
Confidence
76%
Reports
119
Location
SC
SC
212.11.64.154
10/10
Confidence
76%
Reports
82
Location
SC
SC
185.196.8.6
10/10
Confidence
76%
Reports
79
Location
CH
CH
69.5.189.81
10/10
Confidence
76%
Reports
78
Location
SC
SC
185.196.10.164
10/10
Confidence
76%
Reports
74
Location
GB
GB
IPs from the same subnet range, likely same network segment.
7
Related IPs
6.6/10
Avg Threat
50%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
185.208.159.146
8/10
Confidence
97%
Reports
15
Location
US
US
185.208.159.123
8/10
Confidence
77%
Reports
8
Location
US
US
185.208.159.64
10/10
Confidence
74%
Reports
59
Location
US
US
185.208.159.78
0/10
Confidence
41%
Reports
3
Location
US
US
185.208.159.39
7/10
Confidence
30%
Reports
2
Location
US
US
185.208.159.158
7/10
Confidence
25%
Reports
2
Location
US
US
185.208.159.172
6/10
Confidence
4%
Reports
2
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
176
ISP
Limestone Netwo...
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
162.241.152.21
8/10
Confidence
100%
Reports
126
ISP
Network Solutio...
38.95.35.74
8/10
Confidence
100%
Reports
112
ISP
Limestone Netwo...
50.6.169.131
8/10
Confidence
100%
Reports
106
ISP
Network Solutio...
162.214.206.32
10/10
Confidence
100%
Reports
98
ISP
Unified Layer
152.32.148.250
7/10
Confidence
100%
Reports
88
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
72%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
187.108.1.130
8/10
Confidence
72%
Reports
4,633
Location
BR
BR
49.64.242.249
10/10
Confidence
72%
Reports
2,977
Location
CN
CN
92.63.197.55
8/10
Confidence
72%
Reports
2,582
Location
UA
UA
179.51.153.37
10/10
Confidence
72%
Reports
2,285
Location
BR
BR
198.235.24.42
10/10
Confidence
72%
Reports
1,054
Location
US
US
103.183.75.90
10/10
Confidence
72%
Reports
829
Location
ID
ID
147.185.133.104
10/10
Confidence
72%
Reports
750
Location
US
US
78.153.140.43
10/10
Confidence
72%
Reports
622
Location
GB
GB
45.144.212.136
7/10
Confidence
72%
Reports
604
Location
UA
UA
85.215.119.240
8/10
Confidence
72%
Reports
589
Location
DE
DE
45.79.181.104
10/10
Confidence
72%
Reports
576
Location
US
US
118.193.65.234
10/10
Confidence
72%
Reports
551
Location
GB
GB
118.193.58.187
10/10
Confidence
72%
Reports
483
Location
DE
DE
173.239.240.145
10/10
Confidence
72%
Reports
467
Location
US
US
130.12.180.55
10/10
Confidence
72%
Reports
463
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203