Critical Alert
Security alert: 196.251.81.30 rated 10/10 based on 279 verified incidents.
Threat profile indicates sustained malicious activity with 71% confidence rating.
More threatening than 93% of monitored IPs
IP Address
196.251.81.30
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
SC
Location
CHEAPY-HOST
ASN 401120
279
Reports
Honeypot
Data Source
Threat Categories
Hacking
27
SSH
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 401120, operated by CHEAPY-HOST) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
63%
High Confidence
Confidence History
5. Nov 2025 - 11. Nov 2025
71%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 196.251.81.30
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
SC
- ASN
- AS401120
- ISP
- CHEAPY-HOST
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 279
- First Reported
- 19 Sep 2025
- Last Reported
- 11 Nov 2025, 04:58
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS401120
CHEAPY-HOST
NL
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
210
Total IPs Monitored
42,483
Total Reports
202.3
Reports per IP
Network Context
This IP address belongs to CHEAPY-HOST (AS401120), which manages 210 IP addresses in our monitoring system. Out of these, 42,483 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,475 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
279
avg: 23
++
Network Comparison
Compared against 210 IPs in ASN 401120
Threat Level
10/10
network avg: 8.4
+
Total Reports
279
network avg: 186
+
Network CHEAPY-HOST has overall threat level 6/10
Geographic Comparison
Compared against 357 IPs in SC
Threat Level
10/10
country avg: 7.3
+
Total Reports
279
country avg: 91
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
131 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
158
Hacking
121
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 40 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
72%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
196.251.86.122
10/10
Confidence
74%
Reports
23
Location
NL
NL
196.251.83.128
8/10
Confidence
73%
Reports
36
Location
SC
SC
196.251.84.239
8/10
Confidence
73%
Reports
24
Location
NL
NL
196.251.81.95
8/10
Confidence
73%
Reports
19
Location
SC
SC
196.251.85.153
8/10
Confidence
73%
Reports
15
Location
NL
NL
196.251.85.158
8/10
Confidence
73%
Reports
13
Location
NL
NL
196.251.84.153
10/10
Confidence
72%
Reports
107
Location
NL
NL
196.251.85.87
8/10
Confidence
72%
Reports
12
Location
NL
NL
196.251.80.153
10/10
Confidence
71%
Reports
262
Location
SC
SC
196.251.81.21
10/10
Confidence
71%
Reports
191
Location
SC
SC
196.251.83.156
8/10
Confidence
71%
Reports
138
Location
SC
SC
196.251.85.163
8/10
Confidence
71%
Reports
117
Location
NL
NL
196.251.84.60
10/10
Confidence
71%
Reports
109
Location
NL
NL
196.251.69.157
10/10
Confidence
71%
Reports
71
Location
SC
SC
196.251.71.69
8/10
Confidence
71%
Reports
61
Location
SC
SC
196.251.71.80
10/10
Confidence
71%
Reports
51
Location
SC
SC
196.251.69.46
8/10
Confidence
71%
Reports
40
Location
SC
SC
196.251.86.120
8/10
Confidence
71%
Reports
18
Location
NL
NL
196.251.83.221
8/10
Confidence
71%
Reports
11
Location
SC
SC
196.251.80.165
10/10
Confidence
70%
Reports
306
Location
SC
SC
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.7/10
Avg Threat
56%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
196.251.81.95
8/10
Confidence
73%
Reports
19
Location
SC
SC
196.251.81.21
10/10
Confidence
71%
Reports
191
Location
SC
SC
196.251.81.136
8/10
Confidence
70%
Reports
165
Location
SC
SC
196.251.81.79
10/10
Confidence
69%
Reports
400
Location
SC
SC
196.251.81.227
10/10
Confidence
69%
Reports
108
Location
SC
SC
196.251.81.116
10/10
Confidence
67%
Reports
166
Location
SC
SC
196.251.81.89
8/10
Confidence
67%
Reports
97
Location
SC
SC
196.251.81.14
8/10
Confidence
67%
Reports
91
Location
SC
SC
196.251.81.75
8/10
Confidence
67%
Reports
81
Location
SC
SC
196.251.81.117
8/10
Confidence
67%
Reports
81
Location
SC
SC
196.251.81.69
8/10
Confidence
66%
Reports
96
Location
SC
SC
196.251.81.186
10/10
Confidence
62%
Reports
47
Location
SC
SC
196.251.81.194
10/10
Confidence
59%
Reports
183
Location
SC
SC
196.251.81.156
10/10
Confidence
57%
Reports
5
Location
SC
SC
196.251.81.64
8/10
Confidence
51%
Reports
5
Location
SC
SC
196.251.81.34
8/10
Confidence
36%
Reports
8
Location
SC
SC
196.251.81.106
8/10
Confidence
32%
Reports
9
Location
SC
SC
196.251.81.178
10/10
Confidence
25%
Reports
4
Location
SC
SC
196.251.81.133
7/10
Confidence
25%
Reports
2
Location
SC
SC
196.251.81.11
7/10
Confidence
25%
Reports
2
Location
SC
SC
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
68
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
48
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
71%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2.57.122.238
10/10
Confidence
71%
Reports
13,914
Location
RO
RO
80.94.92.168
10/10
Confidence
71%
Reports
2,254
Location
RO
RO
147.185.133.232
10/10
Confidence
71%
Reports
1,897
Location
US
US
35.203.210.123
10/10
Confidence
71%
Reports
1,258
Location
GB
GB
91.224.92.114
10/10
Confidence
71%
Reports
1,242
Location
GB
GB
162.216.150.69
10/10
Confidence
71%
Reports
1,077
Location
US
US
103.174.114.164
10/10
Confidence
71%
Reports
1,063
Location
ID
ID
43.167.235.177
10/10
Confidence
71%
Reports
927
Location
JP
JP
86.54.24.21
10/10
Confidence
71%
Reports
873
Location
LV
LV
106.245.174.79
10/10
Confidence
71%
Reports
810
Location
KR
KR
147.185.133.233
10/10
Confidence
71%
Reports
644
Location
US
US
118.193.57.121
8/10
Confidence
71%
Reports
631
Location
TH
TH
35.203.210.203
10/10
Confidence
71%
Reports
622
Location
GB
GB
118.194.251.145
8/10
Confidence
71%
Reports
555
Location
TH
TH
162.216.149.205
10/10
Confidence
71%
Reports
549
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203