IP Address

197.159.192.39

IPv4 Public
CI CI
AS37381
VIPNET
58 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
91% Confidence
58 Reports

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
CI
CI Location
VIPNET ASN 37381
58 Reports
Honeypot Data Source

Elevated Risk

Elevated threat level 8/10 for IP 197.159.192.39 from 58 reported incidents.

Behavioral profile indicates cyber threat activity with 91% confidence.

More threatening than 81% of monitored IPs

Threat Categories

Hacking 24
WP Login Brute Force 18
Brute-Force 14
Port Scan 11
WP XML-RPC Brute Force 11
Bad Web Bot 3

Technical Details

General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.

Recommended Mitigations

Keep systems patched, implement intrusion detection, and follow security best practices.

High-Risk Network Association

This IP belongs to a network (ASN 37381) with elevated threat levels. The ISP VIPNET hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.

Network-wide patterns may indicate this is part of a larger malicious infrastructure.

Security Recommendations

Enhanced monitoring recommended. Review logs for interactions with this IP.

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 0/10 Inactive
Confidence Score 77% Verified

Confidence History

13. Apr 2026 - 23. Apr 2026
91% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Bad Web Bot WP Fake SEO Bot Hacking +2 Honeypot x2 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Port Scan Hacking Bad Web Bot +2 Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Bad Web Bot WP Fake SEO Bot Hacking +2 Honeypot x2 75%
Hacking Brute-Force Honeypot 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Hacking Brute-Force Honeypot x2 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Honeypot 75%
WP Login Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot x3 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot x4 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot x3 75%
Port Scan Hacking WP XML-RPC Brute Force Honeypot x4 75%
Hacking Brute-Force WP Login Brute Force Honeypot x2 75%
Hacking Brute-Force WP Login Brute Force Honeypot x3 75%
Hacking Brute-Force WP Login Brute Force Honeypot x2 75%
Hacking Brute-Force WP Login Brute Force Honeypot x3 75%
Port Scan WP XML-RPC Brute Force Honeypot x3 75%
Hacking Brute-Force WP Login Brute Force Honeypot x2 75%
Hacking Brute-Force WP Login Brute Force Honeypot x2 75%
Hacking Brute-Force WP Login Brute Force Honeypot x2 75%
10 of 58 shown

Technical Details

Basic Information

IP Address
197.159.192.39
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class C

Geolocation

Country
CI CI
ASN
AS37381
ISP
VIPNET

DNS Information

Reverse DNS
webhosting.vipnet.ci
PTR Record
Yes
Connection Type
Static

Statistics

Total Reports
58
First Reported
3 Apr 2026
Last Reported
23 Apr 2026, 08:42

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS37381
VIPNET
CI CI

Network Threat Assessment

8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.

Network Statistics

1
Total IPs Monitored
58
Total Reports
58
Reports per IP

Network Context

This IP address belongs to VIPNET (AS37381), which manages 1 IP addresses in our monitoring system. Out of these, 58 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.

Network warning: This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.

Comparative Analysis

How this IP compares to others in our threat intelligence database

81 %

Global Threat Ranking

This IP is more threatening than 81% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 209,128 reported IPs worldwide

Threat Level 8/10 avg: 5.4 +
Total Reports 58 avg: 22 ++

Geographic Comparison

Compared against 65 IPs in CI

Threat Level 8/10 country avg: 5.5 +
Total Reports 58 country avg: 3 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

196,136 threat incidents tracked globally • Last 24h: 17,510 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    40,101 20.4%
  2. 02
    IN
    India IN
    31,292 16%
  3. 03
    CN
    China CN
    26,714 13.6%
  4. 04
    BR
    Brazil BR
    10,642 5.4%
  5. 05
    DE
    Germany DE
    7,421 3.8%
  6. 06
    SG
    Singapore SG
    6,672 3.4%
  7. 07
    ID
    Indonesia ID
    5,835 3%
  8. 08
    PK
    Pakistan PK
    5,071 2.6%
  9. 09
    RU
    Russia RU
    5,011 2.6%
  10. 10
    NL
    Netherlands NL
    4,563 2.3%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs with similar threat level and confidence scores.

15 Related IPs
8.1/10 Avg Threat
91% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
172.110.223.33 8/10
Confidence 91%
Reports 6,915
Location HK HK
13 Jun 2026
176.65.149.27 10/10
Confidence 91%
Reports 4,135
Location NL NL
13 Jun 2026
176.65.149.31 8/10
Confidence 91%
Reports 4,061
Location NL NL
12 Jun 2026
46.151.178.13 8/10
Confidence 91%
Reports 2,774
Location NL NL
13 Jun 2026
194.50.16.198 8/10
Confidence 91%
Reports 2,443
Location NL NL
13 May 2026
91.92.243.76 8/10
Confidence 91%
Reports 2,055
Location US US
13 Jun 2026
185.218.138.11 7/10
Confidence 91%
Reports 1,649
Location US US
13 Jun 2026
51.159.110.167 10/10
Confidence 91%
Reports 1,583
Location FR FR
13 Jun 2026
185.218.138.14 7/10
Confidence 91%
Reports 1,572
Location US US
13 Jun 2026
185.218.138.13 8/10
Confidence 91%
Reports 1,514
Location US US
13 Jun 2026
88.210.63.3 8/10
Confidence 91%
Reports 1,501
Location UA UA
13 Jun 2026
92.63.197.80 8/10
Confidence 91%
Reports 1,476
Location UA UA
13 Jun 2026
88.210.63.5 8/10
Confidence 91%
Reports 1,447
Location UA UA
13 Jun 2026
92.63.197.79 8/10
Confidence 91%
Reports 1,442
Location UA UA
13 Jun 2026
88.210.63.4 8/10
Confidence 91%
Reports 1,358
Location UA UA
13 Jun 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "197.159.192.39",
    "threat_level": 8,
    "confidence_score": 91,
    "total_reports": 58,
    "country_code": "CI",
    "isp_name": "VIPNET",
    "asn": "37381",
    "first_reported": "2026-04-03 20:20:54",
    "last_reported": "2026-04-23 08:42:20",
    "exported_at": "2026-06-13T20:02:31+02:00",
    "source": "https://reportedip.de/ip/197.159.192.39/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses