Critical Alert
Security alert: 42.200.66.164 rated 10/10 based on 133 verified incidents.
Threat profile indicates sustained malicious activity with 86% confidence rating.
More threatening than 97% of monitored IPs
IP Address
42.200.66.164
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
HK
Location
HKT Limited
ASN 4760
133
Reports
Honeypot
Data Source
Threat Categories
SSH
25
Hacking
9
Exploited Host
5
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
27. June 2026
Last Activity
14. July 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 4760, operated by HKT Limited) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
82%
Verified
Confidence History
28. May 2026 - 14. Jul 2026
86%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x4 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 42.200.66.164
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
HK
- ASN
- AS4760
- ISP
- HKT Limited
DNS Information
- Reverse DNS
- 42-200-66-164.static.imsbiz.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 133
- First Reported
- 19 Feb 2026
- Last Reported
- 14 Jul 2026, 19:55
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4760
HKT Limited
HK
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
91
Total IPs Monitored
829
Total Reports
9.1
Reports per IP
Network Context
This IP address belongs to HKT Limited (AS4760), which manages 91 IP addresses in our monitoring system. Out of these, 829 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 291,361 reported IPs worldwide
Threat Level
10/10
avg: 5.9
++
Total Reports
133
avg: 18
++
Network Comparison
Compared against 121 IPs in ASN 4760
Threat Level
10/10
network avg: 5.6
++
Total Reports
133
network avg: 9
++
Network HKT Limited has overall threat level 5/10
Geographic Comparison
Compared against 3,530 IPs in HK
Threat Level
10/10
country avg: 6.4
++
Total Reports
133
country avg: 38
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 Jun 2026
5 reports
Daily Average
0.4
reports/day
Most Active
Thursday
29 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
127
Hacking
12
Exploited Host
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 14 reports
Weekly Activity
Geographic Threat Distribution
273,382 threat incidents tracked globally • Last 24h: 17,471 Logs
FEED
Top Threat Sources
-
01
United States61,490 22.5% -
02
India45,223 16.5% -
03
China34,038 12.5% -
04
Brazil14,651 5.4% -
05
Germany9,813 3.6% -
06
Singapore7,934 2.9% -
07
Indonesia7,832 2.9% -
08
Pakistan7,757 2.8% -
09
Russia6,142 2.2% -
10
Netherlands5,878 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
78%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
42.200.78.166
10/10
Confidence
100%
Reports
37
Location
HK
HK
58.152.42.174
10/10
Confidence
100%
Reports
18
Location
HK
HK
112.119.21.245
10/10
Confidence
98%
Reports
29
Location
HK
HK
42.200.71.221
10/10
Confidence
94%
Reports
48
Location
HK
HK
72.255.246.193
8/10
Confidence
94%
Reports
10
Location
HK
HK
42.200.78.78
10/10
Confidence
92%
Reports
101
Location
HK
HK
223.197.248.209
10/10
Confidence
90%
Reports
148
Location
HK
HK
112.120.171.95
10/10
Confidence
89%
Reports
121
Location
HK
HK
65.181.88.245
8/10
Confidence
88%
Reports
12
Location
HK
HK
223.197.186.7
10/10
Confidence
87%
Reports
107
Location
HK
HK
65.181.72.25
10/10
Confidence
82%
Reports
17
Location
HK
HK
42.200.213.82
10/10
Confidence
77%
Reports
15
Location
HK
HK
218.102.122.116
10/10
Confidence
63%
Reports
7
Location
HK
HK
218.103.36.176
7/10
Confidence
62%
Reports
7
Location
HK
HK
94.190.231.106
10/10
Confidence
62%
Reports
5
Location
HK
HK
223.197.145.226
10/10
Confidence
61%
Reports
20
Location
HK
HK
220.246.47.145
7/10
Confidence
57%
Reports
7
Location
HK
HK
116.48.143.166
7/10
Confidence
55%
Reports
6
Location
HK
HK
203.198.150.36
8/10
Confidence
55%
Reports
4
Location
HK
HK
220.246.47.169
7/10
Confidence
54%
Reports
6
Location
HK
HK
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
36%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
47.86.33.52
8/10
Confidence
100%
Reports
90
ISP
Alibaba (US) Te...
8.217.108.67
10/10
Confidence
100%
Reports
83
ISP
Alibaba (US) Te...
65.52.167.153
8/10
Confidence
100%
Reports
79
ISP
MICROSOFT-CORP-...
119.28.9.170
10/10
Confidence
100%
Reports
77
ISP
Tencent Buildin...
103.243.24.124
10/10
Confidence
100%
Reports
62
ISP
Overcasts Limited
43.242.203.160
10/10
Confidence
100%
Reports
53
ISP
COGNETCLOUD
165.154.22.6
8/10
Confidence
100%
Reports
52
ISP
UCLOUD INFORMAT...
45.249.246.120
8/10
Confidence
100%
Reports
51
ISP
UCLOUD INFORMAT...
165.154.6.26
10/10
Confidence
100%
Reports
49
ISP
UCLOUD INFORMAT...
152.32.130.174
10/10
Confidence
100%
Reports
47
ISP
UCLOUD INFORMAT...
103.106.188.32
10/10
Confidence
100%
Reports
46
ISP
cognetcloud INC
165.154.6.104
10/10
Confidence
100%
Reports
41
ISP
UCLOUD INFORMAT...
152.32.130.144
10/10
Confidence
100%
Reports
38
ISP
UCLOUD INFORMAT...
42.200.78.166
10/10
Confidence
100%
Reports
37
ISP
HKT Limited
150.5.154.160
10/10
Confidence
100%
Reports
37
ISP
Byteplus Pte. Ltd.
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.149.67
10/10
Confidence
86%
Reports
5,516
Location
NL
NL
95.214.52.233
10/10
Confidence
86%
Reports
3,597
Location
PL
PL
155.138.210.119
10/10
Confidence
86%
Reports
1,539
Location
US
US
106.75.137.178
10/10
Confidence
86%
Reports
1,234
Location
CN
CN
2.57.122.96
10/10
Confidence
86%
Reports
1,017
Location
RO
RO
103.56.148.184
10/10
Confidence
86%
Reports
863
Location
ID
ID
158.94.209.193
10/10
Confidence
86%
Reports
745
Location
NL
NL
65.49.1.232
8/10
Confidence
86%
Reports
692
Location
US
US
184.105.139.70
8/10
Confidence
86%
Reports
658
Location
US
US
216.218.206.68
8/10
Confidence
86%
Reports
641
Location
US
US
167.94.146.55
8/10
Confidence
86%
Reports
631
Location
US
US
204.76.203.212
10/10
Confidence
86%
Reports
617
Location
NL
NL
184.105.247.252
10/10
Confidence
86%
Reports
605
Location
US
US
185.242.226.91
10/10
Confidence
86%
Reports
590
Location
US
US
167.94.146.61
8/10
Confidence
86%
Reports
586
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13