Elevated Risk
Elevated threat level 8/10 for IP 196.251.73.230 from 68 reported incidents.
Behavioral profile indicates cyber threat activity with 67% confidence.
More threatening than 79% of monitored IPs
IP Address
196.251.73.230
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
SC
Location
CHEAPY-HOST
ASN 401120
68
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Moderate Network Risk
The network hosting this IP (ASN 401120, operated by CHEAPY-HOST) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
58%
High Confidence
Confidence History
28. Oct 2025 - 7. Nov 2025
67%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 196.251.73.230
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
SC
- ASN
- AS401120
- ISP
- CHEAPY-HOST
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 68
- First Reported
- 24 Oct 2025
- Last Reported
- 7 Nov 2025, 15:48
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS401120
CHEAPY-HOST
NL
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
210
Total IPs Monitored
42,483
Total Reports
202.3
Reports per IP
Network Context
This IP address belongs to CHEAPY-HOST (AS401120), which manages 210 IP addresses in our monitoring system. Out of these, 42,483 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,002 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
68
avg: 23
++
Network Comparison
Compared against 210 IPs in ASN 401120
Threat Level
8/10
network avg: 8.4
=
Total Reports
68
network avg: 186
--
Network CHEAPY-HOST has overall threat level 6/10
Geographic Comparison
Compared against 357 IPs in SC
Threat Level
8/10
country avg: 7.3
=
Total Reports
68
country avg: 91
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
34 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
68
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 12 reports
Weekly Activity
Geographic Threat Distribution
186,739 threat incidents tracked globally • Last 24h: 18,692 Logs
FEED
Top Threat Sources
-
01
United States38,392 20.6% -
02
India28,868 15.5% -
03
China25,992 13.9% -
04
Brazil10,226 5.5% -
05
Germany7,136 3.8% -
06
Singapore6,462 3.5% -
07
Indonesia5,509 3% -
08
Russia4,699 2.5% -
09
Pakistan4,639 2.5% -
10
Netherlands4,353 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
72%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
196.251.86.122
10/10
Confidence
74%
Reports
23
Location
NL
NL
196.251.83.128
8/10
Confidence
73%
Reports
36
Location
SC
SC
196.251.84.239
8/10
Confidence
73%
Reports
24
Location
NL
NL
196.251.81.95
8/10
Confidence
73%
Reports
19
Location
SC
SC
196.251.85.153
8/10
Confidence
73%
Reports
15
Location
NL
NL
196.251.85.158
8/10
Confidence
73%
Reports
13
Location
NL
NL
196.251.84.153
10/10
Confidence
72%
Reports
107
Location
NL
NL
196.251.85.87
8/10
Confidence
72%
Reports
12
Location
NL
NL
196.251.81.30
10/10
Confidence
71%
Reports
279
Location
SC
SC
196.251.80.153
10/10
Confidence
71%
Reports
262
Location
SC
SC
196.251.81.21
10/10
Confidence
71%
Reports
191
Location
SC
SC
196.251.83.156
8/10
Confidence
71%
Reports
138
Location
SC
SC
196.251.85.163
8/10
Confidence
71%
Reports
117
Location
NL
NL
196.251.84.60
10/10
Confidence
71%
Reports
109
Location
NL
NL
196.251.69.157
10/10
Confidence
71%
Reports
71
Location
SC
SC
196.251.71.69
8/10
Confidence
71%
Reports
61
Location
SC
SC
196.251.71.80
10/10
Confidence
71%
Reports
51
Location
SC
SC
196.251.69.46
8/10
Confidence
71%
Reports
40
Location
SC
SC
196.251.86.120
8/10
Confidence
71%
Reports
18
Location
NL
NL
196.251.83.221
8/10
Confidence
71%
Reports
11
Location
SC
SC
IPs from the same subnet range, likely same network segment.
10
Related IPs
7.7/10
Avg Threat
38%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
196.251.73.10
10/10
Confidence
69%
Reports
35
Location
SC
SC
196.251.73.243
8/10
Confidence
67%
Reports
71
Location
SC
SC
196.251.73.73
8/10
Confidence
66%
Reports
49
Location
SC
SC
196.251.73.55
8/10
Confidence
39%
Reports
3
Location
SC
SC
196.251.73.241
8/10
Confidence
33%
Reports
6
Location
SC
SC
196.251.73.128
7/10
Confidence
30%
Reports
2
Location
SC
SC
196.251.73.131
7/10
Confidence
30%
Reports
2
Location
SC
SC
196.251.73.129
7/10
Confidence
20%
Reports
1
Location
SC
SC
196.251.73.71
7/10
Confidence
19%
Reports
1
Location
SC
SC
196.251.73.137
7/10
Confidence
7%
Reports
40
Location
SC
SC
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
67
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
47
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
67%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
119.96.159.237
10/10
Confidence
67%
Reports
1,904
Location
CN
CN
180.153.91.15
10/10
Confidence
67%
Reports
1,424
Location
CN
CN
66.132.153.50
10/10
Confidence
67%
Reports
1,350
Location
US
US
77.83.39.249
7/10
Confidence
67%
Reports
1,106
Location
UA
UA
167.99.141.235
8/10
Confidence
67%
Reports
1,100
Location
DE
DE
130.12.180.80
10/10
Confidence
67%
Reports
976
Location
GB
GB
45.135.232.177
8/10
Confidence
67%
Reports
876
Location
RU
RU
120.48.175.69
10/10
Confidence
67%
Reports
857
Location
CN
CN
103.105.66.26
10/10
Confidence
67%
Reports
726
Location
ID
ID
23.94.38.226
10/10
Confidence
67%
Reports
717
Location
US
US
207.90.244.23
8/10
Confidence
67%
Reports
684
Location
US
US
115.247.46.121
10/10
Confidence
67%
Reports
666
Location
IN
IN
204.76.203.18
10/10
Confidence
67%
Reports
591
Location
NL
NL
136.114.224.44
10/10
Confidence
67%
Reports
571
Location
US
US
92.118.39.84
10/10
Confidence
67%
Reports
545
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203