Notable Threat
IP 154.219.113.15 rated 8/10 from 19 verified reports.
Multiple security incidents attributed to this IP. Confidence: 68%.
More threatening than 79% of monitored IPs
IP Address
154.219.113.15
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
HK
Location
COGNETCLOUD-2
ASN 401701
19
Reports
Honeypot
Data Source
Threat Categories
SSH
19
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 401701) with generally good reputation. The ISP COGNETCLOUD-2 maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
64%
High Confidence
Confidence History
22. Feb 2026 - 3. Mar 2026
68%
Current
Stable
Trend
Security Reports (19)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 154.219.113.15
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
HK
- ASN
- AS401701
- ISP
- COGNETCLOUD-2
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 19
- First Reported
- 22 Feb 2026
- Last Reported
- 3 Mar 2026, 09:28
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS401701
cognetcloud INC
CN
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
24
Total IPs Monitored
234
Total Reports
9.8
Reports per IP
Network Context
This IP address belongs to cognetcloud INC (AS401701), which manages 24 IP addresses in our monitoring system. Out of these, 234 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,830 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
19
avg: 23
-
Network Comparison
Compared against 37 IPs in ASN 401701
Threat Level
8/10
network avg: 4.8
++
Total Reports
19
network avg: 7
++
Network COGNETCLOUD-2 has overall threat level 0/10
Geographic Comparison
Compared against 2,682 IPs in HK
Threat Level
8/10
country avg: 6.1
+
Total Reports
19
country avg: 45
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
19
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,519 threat incidents tracked globally • Last 24h: 18,988 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,036 13.9%
-
04
Brazil10,259 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.3/10
Avg Threat
57%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
45.192.97.6
7/10
Confidence
89%
Reports
16
Location
SC
SC
165.99.42.47
10/10
Confidence
88%
Reports
53
Location
CN
CN
103.52.152.101
8/10
Confidence
85%
Reports
15
Location
HK
HK
45.207.221.76
10/10
Confidence
80%
Reports
11
Location
HK
HK
154.222.24.142
10/10
Confidence
76%
Reports
60
Location
SC
SC
45.192.96.79
8/10
Confidence
65%
Reports
13
Location
MU
MU
38.76.214.92
10/10
Confidence
57%
Reports
6
Location
US
US
38.76.171.153
10/10
Confidence
56%
Reports
4
Location
HK
HK
154.219.100.220
0/10
Confidence
55%
Reports
4
Location
HK
HK
154.219.103.140
0/10
Confidence
53%
Reports
4
Location
HK
HK
38.76.163.36
10/10
Confidence
51%
Reports
3
Location
HK
HK
38.76.194.248
0/10
Confidence
50%
Reports
3
Location
US
US
156.225.29.205
0/10
Confidence
47%
Reports
3
Location
SC
SC
82.158.231.29
8/10
Confidence
46%
Reports
3
Location
HK
HK
156.233.229.139
10/10
Confidence
45%
Reports
3
Location
US
US
38.76.213.5
10/10
Confidence
43%
Reports
6
Location
US
US
154.94.239.17
7/10
Confidence
40%
Reports
2
Location
SC
SC
45.113.3.47
0/10
Confidence
40%
Reports
2
Location
HK
HK
154.222.30.155
8/10
Confidence
37%
Reports
6
Location
SC
SC
45.192.96.183
0/10
Confidence
37%
Reports
2
Location
MU
MU
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
65.52.167.153
8/10
Confidence
100%
Reports
79
ISP
MICROSOFT-CORP-...
165.154.41.13
7/10
Confidence
100%
Reports
79
ISP
ZEN-DPS
165.154.22.6
8/10
Confidence
100%
Reports
52
ISP
UCLOUD INFORMAT...
119.28.9.170
10/10
Confidence
100%
Reports
51
ISP
Tencent Buildin...
45.249.246.120
8/10
Confidence
100%
Reports
51
ISP
UCLOUD INFORMAT...
165.154.6.26
10/10
Confidence
100%
Reports
49
ISP
UCLOUD INFORMAT...
152.32.130.174
10/10
Confidence
100%
Reports
47
ISP
UCLOUD INFORMAT...
165.154.6.104
10/10
Confidence
100%
Reports
41
ISP
UCLOUD INFORMAT...
152.32.130.144
10/10
Confidence
100%
Reports
38
ISP
UCLOUD INFORMAT...
103.106.188.32
10/10
Confidence
100%
Reports
37
ISP
cognetcloud INC
165.154.5.148
10/10
Confidence
100%
Reports
33
ISP
UCLOUD INFORMAT...
152.32.213.101
8/10
Confidence
100%
Reports
26
ISP
UCLOUD INFORMAT...
144.48.243.18
10/10
Confidence
100%
Reports
21
ISP
Overcasts Limited
154.83.13.181
10/10
Confidence
100%
Reports
21
ISP
YISU CLOUD LTD
165.154.23.26
10/10
Confidence
100%
Reports
19
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
68%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
159.69.99.156
10/10
Confidence
68%
Reports
4,561
Location
DE
DE
66.132.153.60
10/10
Confidence
68%
Reports
1,351
Location
US
US
66.132.153.61
10/10
Confidence
68%
Reports
1,298
Location
US
US
66.132.153.63
10/10
Confidence
68%
Reports
1,290
Location
US
US
66.132.153.57
10/10
Confidence
68%
Reports
1,228
Location
US
US
66.132.153.52
10/10
Confidence
68%
Reports
1,173
Location
US
US
194.165.16.11
10/10
Confidence
68%
Reports
981
Location
MC
MC
91.92.242.109
10/10
Confidence
68%
Reports
876
Location
NL
NL
77.83.39.156
7/10
Confidence
68%
Reports
718
Location
UA
UA
164.92.205.72
10/10
Confidence
68%
Reports
494
Location
DE
DE
204.76.203.192
10/10
Confidence
68%
Reports
458
Location
NL
NL
178.62.53.116
10/10
Confidence
68%
Reports
450
Location
GB
GB
142.93.141.251
10/10
Confidence
68%
Reports
386
Location
NL
NL
62.60.130.65
7/10
Confidence
68%
Reports
346
Location
IR
IR
45.183.247.34
8/10
Confidence
68%
Reports
323
Location
CO
CO
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203