High Risk
IP 192.109.200.105 rated at threat level 8/10 based on 51 security reports.
Pattern analysis reveals concerning activity. Confidence: 67%.
More threatening than 79% of monitored IPs
IP Address
192.109.200.105
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
SE
Location
ipv
ISP
51
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 0) with generally good reputation. The ISP ipv maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
64%
High Confidence
Confidence History
27. Jan 2026 - 29. Jan 2026
67%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 192.109.200.105
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
SE
- ASN
- Unknown
- ISP
- ipv
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 51
- First Reported
- 26 Jan 2026
- Last Reported
- 29 Jan 2026, 21:31
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,571 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
51
avg: 23
++
Geographic Comparison
Compared against 1,018 IPs in SE
Threat Level
8/10
country avg: 5.6
+
Total Reports
51
country avg: 19
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
51
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.9/10
Avg Threat
77%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
192.109.200.101
8/10
Confidence
100%
Reports
266
Location
SE
SE
192.109.200.237
10/10
Confidence
100%
Reports
35
Location
SE
SE
192.109.200.220
10/10
Confidence
94%
Reports
31
Location
BG
BG
192.109.200.50
10/10
Confidence
94%
Reports
14
Location
BG
BG
192.109.200.204
10/10
Confidence
86%
Reports
12
Location
SE
SE
192.109.200.175
10/10
Confidence
85%
Reports
11
Location
BG
BG
192.109.200.213
10/10
Confidence
84%
Reports
48
Location
SE
SE
192.109.200.219
10/10
Confidence
79%
Reports
51
Location
SE
SE
192.109.200.252
10/10
Confidence
76%
Reports
11
Location
BG
BG
192.109.200.172
8/10
Confidence
73%
Reports
9
Location
SE
SE
192.109.200.13
10/10
Confidence
70%
Reports
4
Location
SE
SE
192.109.200.128
0/10
Confidence
69%
Reports
4
Location
SE
SE
192.109.200.205
10/10
Confidence
68%
Reports
45
Location
SE
SE
192.109.200.107
8/10
Confidence
67%
Reports
54
Location
SE
SE
192.109.200.109
8/10
Confidence
67%
Reports
17
Location
SE
SE
192.109.200.30
8/10
Confidence
67%
Reports
7
Location
SE
SE
192.109.200.227
10/10
Confidence
66%
Reports
14
Location
SE
SE
192.109.200.20
8/10
Confidence
66%
Reports
8
Location
SE
SE
192.109.200.24
10/10
Confidence
65%
Reports
45
Location
SE
SE
192.109.200.27
10/10
Confidence
65%
Reports
14
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.109.200.101
8/10
Confidence
100%
Reports
266
ISP
Pfcloud UG (haf...
192.176.172.166
8/10
Confidence
100%
Reports
248
ISP
Kepler Technolo...
83.68.248.161
10/10
Confidence
100%
Reports
94
ISP
Arkaden Konsult AB
171.25.158.58
10/10
Confidence
100%
Reports
56
ISP
Patrik Lagerman
4.225.39.110
10/10
Confidence
100%
Reports
53
ISP
Microsoft Corpo...
192.109.200.237
10/10
Confidence
100%
Reports
35
ISP
Pfcloud UG (haf...
171.25.158.24
10/10
Confidence
99%
Reports
71
ISP
Patrik Lagerman
171.25.158.82
10/10
Confidence
99%
Reports
67
ISP
Patrik Lagerman
171.25.158.80
10/10
Confidence
99%
Reports
37
ISP
Patrik Lagerman
90.143.178.70
10/10
Confidence
97%
Reports
26
ISP
Tele2 SWIPnet
195.47.238.177
10/10
Confidence
96%
Reports
131
ISP
No ACK Group Ho...
171.25.158.74
10/10
Confidence
96%
Reports
86
ISP
Patrik Lagerman
195.47.238.91
8/10
Confidence
96%
Reports
77
ISP
No ACK Group Ho...
171.25.158.70
10/10
Confidence
95%
Reports
124
ISP
Patrik Lagerman
185.246.128.133
10/10
Confidence
94%
Reports
5,114
ISP
w1n ltd
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
67%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
119.96.159.237
10/10
Confidence
67%
Reports
1,904
Location
CN
CN
152.32.135.214
10/10
Confidence
67%
Reports
1,466
Location
HK
HK
180.153.91.15
10/10
Confidence
67%
Reports
1,424
Location
CN
CN
66.132.153.50
10/10
Confidence
67%
Reports
1,350
Location
US
US
77.83.39.249
7/10
Confidence
67%
Reports
1,106
Location
UA
UA
167.99.141.235
8/10
Confidence
67%
Reports
1,100
Location
DE
DE
130.12.180.80
10/10
Confidence
67%
Reports
976
Location
GB
GB
45.135.232.177
8/10
Confidence
67%
Reports
876
Location
RU
RU
120.48.175.69
10/10
Confidence
67%
Reports
857
Location
CN
CN
103.105.66.26
10/10
Confidence
67%
Reports
726
Location
ID
ID
23.94.38.226
10/10
Confidence
67%
Reports
717
Location
US
US
207.90.244.23
8/10
Confidence
67%
Reports
684
Location
US
US
115.247.46.121
10/10
Confidence
67%
Reports
666
Location
IN
IN
204.76.203.18
10/10
Confidence
67%
Reports
591
Location
NL
NL
136.114.224.44
10/10
Confidence
67%
Reports
571
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203