Critical Alert
Security alert: 140.106.25.230 rated 10/10 based on 42 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 98% of monitored IPs
IP Address
140.106.25.230
IPv4
Public
CA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CA
Location
CC-3272
ASN 11290
42
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Hacking
2
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
13. May 2026
Last Activity
1. June 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 11290, operated by CC-3272) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
86%
Verified
Confidence History
27. Feb 2026 - 1. Jun 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 140.106.25.230
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
CA
- ASN
- AS11290
- ISP
- CC-3272
DNS Information
- Reverse DNS
- 140-106-25-230.resi.cgocable.ca
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 42
- First Reported
- 21 Feb 2026
- Last Reported
- 1 Jun 2026, 20:13
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS11290
Cogeco Connexion inc
CA
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
5
Total IPs Monitored
659
Total Reports
131.8
Reports per IP
Network Context
This IP address belongs to Cogeco Connexion inc (AS11290), which manages 5 IP addresses in our monitoring system. Out of these, 659 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,763 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
42
avg: 23
++
Network Comparison
Compared against 8 IPs in ASN 11290
Threat Level
10/10
network avg: 5.8
++
Total Reports
42
network avg: 85
--
Network CC-3272 has overall threat level 4/10
Geographic Comparison
Compared against 2,096 IPs in CA
Threat Level
10/10
country avg: 5.0
++
Total Reports
42
country avg: 23
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
5 reports
Daily Average
0.3
reports/day
Most Active
Sunday
11 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
42
Hacking
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
7
Related IPs
5.1/10
Avg Threat
37%
Avg Confidence
2
High Threat
Elevated risk: Multiple related IPs are flagged
173.0.203.233
8/10
Confidence
68%
Reports
9
Location
CA
CA
209.15.168.138
10/10
Confidence
60%
Reports
626
Location
CA
CA
209.169.130.160
0/10
Confidence
30%
Reports
1
Location
CA
CA
24.226.169.79
0/10
Confidence
30%
Reports
1
Location
CA
CA
208.96.233.67
6/10
Confidence
27%
Reports
2
Location
CA
CA
2001:18c0:99d:a200:59f2:e74b:7547:f06b
6/10
Confidence
23%
Reports
1
Location
CA
CA
2001:18c0:99d:a200:a898:969c:1814:74b8
6/10
Confidence
22%
Reports
1
Location
CA
CA
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
54.39.17.116
8/10
Confidence
100%
Reports
204
ISP
OVH SAS
20.116.34.103
10/10
Confidence
100%
Reports
47
ISP
Microsoft Corpo...
38.49.217.60
8/10
Confidence
100%
Reports
46
ISP
Rica Web Services
192.99.10.178
8/10
Confidence
100%
Reports
30
ISP
OVH SAS
216.251.35.201
8/10
Confidence
100%
Reports
30
ISP
Internet Names ...
209.235.136.136
8/10
Confidence
100%
Reports
29
ISP
INFB-AS
216.251.35.204
10/10
Confidence
100%
Reports
25
ISP
Internet Names ...
20.151.117.104
8/10
Confidence
100%
Reports
23
ISP
Microsoft Corpo...
51.222.205.120
10/10
Confidence
100%
Reports
19
ISP
OVH SAS
74.56.214.214
8/10
Confidence
100%
Reports
18
ISP
Videotron Ltee
20.116.59.164
8/10
Confidence
100%
Reports
18
ISP
Microsoft Corpo...
207.35.211.98
8/10
Confidence
99%
Reports
43
ISP
Bell Canada
4.206.92.183
10/10
Confidence
99%
Reports
24
ISP
Microsoft Corpo...
24.203.79.110
8/10
Confidence
99%
Reports
20
ISP
Videotron Ltee
20.220.211.108
10/10
Confidence
98%
Reports
38
ISP
Microsoft Corpo...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
51.68.207.118
10/10
Confidence
94%
Reports
5,264
Location
FR
FR
185.246.128.133
10/10
Confidence
94%
Reports
5,118
Location
SE
SE
185.233.247.245
8/10
Confidence
94%
Reports
3,686
Location
TR
TR
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
66.132.172.162
10/10
Confidence
94%
Reports
3,326
Location
US
US
66.132.172.165
10/10
Confidence
94%
Reports
3,323
Location
US
US
66.132.172.175
10/10
Confidence
94%
Reports
3,317
Location
US
US
66.132.172.164
10/10
Confidence
94%
Reports
3,311
Location
US
US
66.132.172.167
10/10
Confidence
94%
Reports
3,305
Location
US
US
66.132.172.171
10/10
Confidence
94%
Reports
3,291
Location
US
US
66.132.172.160
8/10
Confidence
94%
Reports
3,275
Location
US
US
66.132.172.161
10/10
Confidence
94%
Reports
3,274
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203