Critical Alert
Security alert: 165.154.1.18 rated 10/10 based on 85 verified incidents.
Threat profile indicates sustained malicious activity with 92% confidence rating.
More threatening than 98% of monitored IPs
IP Address
165.154.1.18
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
HK
Location
ZEN-DPS
ASN 62610
85
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
4
Brute-Force
1
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
High-Risk Network Association
This IP belongs to a network (ASN 62610) with elevated threat levels. The ISP ZEN-DPS hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
6/10
Moderate
Confidence Score
69%
High Confidence
Confidence History
16. Apr 2026 - 12. Jun 2026
92%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 165.154.1.18
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
HK
- ASN
- AS62610
- ISP
- ZEN-DPS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 85
- First Reported
- 8 Dec 2025
- Last Reported
- 12 Jun 2026, 19:54
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS62610
ZEN-DPS
HK
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
162
Total IPs Monitored
14,799
Total Reports
91.4
Reports per IP
Network Context
This IP address belongs to ZEN-DPS (AS62610), which manages 162 IP addresses in our monitoring system. Out of these, 14,799 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 292,015 reported IPs worldwide
Threat Level
10/10
avg: 5.9
++
Total Reports
85
avg: 18
++
Network Comparison
Compared against 165 IPs in ASN 62610
Threat Level
10/10
network avg: 9.6
=
Total Reports
85
network avg: 185
--
Network ZEN-DPS has overall threat level 7/10
Geographic Comparison
Compared against 3,539 IPs in HK
Threat Level
10/10
country avg: 6.4
++
Total Reports
85
country avg: 38
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
81
Hacking
8
Exploited Host
2
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
274,010 threat incidents tracked globally • Last 24h: 16,284 Logs
FEED
Top Threat Sources
-
01
United States61,656 22.5% -
02
India45,351 16.6% -
03
China34,078 12.4% -
04
Brazil14,669 5.4% -
05
Germany9,833 3.6% -
06
Singapore7,941 2.9% -
07
Indonesia7,845 2.9% -
08
Pakistan7,780 2.8% -
09
Russia6,162 2.2% -
10
Netherlands5,899 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
93%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
118.193.43.244
8/10
Confidence
98%
Reports
127
Location
HK
HK
165.154.41.152
8/10
Confidence
96%
Reports
118
Location
HK
HK
165.154.41.6
7/10
Confidence
95%
Reports
126
Location
HK
HK
152.32.253.205
10/10
Confidence
95%
Reports
33
Location
HK
HK
165.154.41.201
7/10
Confidence
94%
Reports
125
Location
HK
HK
165.154.41.115
7/10
Confidence
94%
Reports
104
Location
HK
HK
165.154.0.193
10/10
Confidence
94%
Reports
82
Location
HK
HK
118.193.36.149
8/10
Confidence
93%
Reports
133
Location
HK
HK
165.154.41.232
7/10
Confidence
93%
Reports
120
Location
HK
HK
165.154.41.205
8/10
Confidence
93%
Reports
113
Location
HK
HK
165.154.41.213
7/10
Confidence
92%
Reports
143
Location
HK
HK
165.154.41.13
8/10
Confidence
92%
Reports
110
Location
HK
HK
103.210.22.74
10/10
Confidence
92%
Reports
76
Location
SG
SG
101.36.123.102
10/10
Confidence
91%
Reports
139
Location
HK
HK
118.193.38.134
10/10
Confidence
91%
Reports
109
Location
HK
HK
152.32.129.154
8/10
Confidence
91%
Reports
104
Location
HK
HK
152.32.133.103
10/10
Confidence
90%
Reports
127
Location
HK
HK
123.58.213.20
10/10
Confidence
90%
Reports
113
Location
HK
HK
123.58.213.118
10/10
Confidence
90%
Reports
111
Location
HK
HK
101.36.106.89
10/10
Confidence
90%
Reports
77
Location
HK
HK
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
47.86.33.52
8/10
Confidence
100%
Reports
90
ISP
Alibaba (US) Te...
8.217.108.67
10/10
Confidence
100%
Reports
83
ISP
Alibaba (US) Te...
65.52.167.153
8/10
Confidence
100%
Reports
79
ISP
MICROSOFT-CORP-...
119.28.9.170
10/10
Confidence
100%
Reports
77
ISP
Tencent Buildin...
103.243.24.124
10/10
Confidence
100%
Reports
62
ISP
Overcasts Limited
43.242.203.160
10/10
Confidence
100%
Reports
53
ISP
COGNETCLOUD
165.154.22.6
8/10
Confidence
100%
Reports
52
ISP
UCLOUD INFORMAT...
45.249.246.120
8/10
Confidence
100%
Reports
51
ISP
UCLOUD INFORMAT...
165.154.6.26
10/10
Confidence
100%
Reports
49
ISP
UCLOUD INFORMAT...
152.32.130.174
10/10
Confidence
100%
Reports
47
ISP
UCLOUD INFORMAT...
103.106.188.32
10/10
Confidence
100%
Reports
46
ISP
cognetcloud INC
165.154.6.104
10/10
Confidence
100%
Reports
41
ISP
UCLOUD INFORMAT...
152.32.130.144
10/10
Confidence
100%
Reports
38
ISP
UCLOUD INFORMAT...
42.200.78.166
10/10
Confidence
100%
Reports
37
ISP
HKT Limited
150.5.154.160
10/10
Confidence
100%
Reports
37
ISP
Byteplus Pte. Ltd.
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
106.75.186.101
10/10
Confidence
92%
Reports
987
Location
CN
CN
106.75.164.40
10/10
Confidence
92%
Reports
977
Location
CN
CN
106.75.157.47
10/10
Confidence
92%
Reports
939
Location
CN
CN
106.75.156.189
10/10
Confidence
92%
Reports
935
Location
CN
CN
106.75.189.197
10/10
Confidence
92%
Reports
914
Location
CN
CN
87.106.98.147
8/10
Confidence
92%
Reports
802
Location
DE
DE
217.160.24.45
8/10
Confidence
92%
Reports
777
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
743
Location
DE
DE
185.132.46.108
8/10
Confidence
92%
Reports
740
Location
DE
DE
77.91.97.123
8/10
Confidence
92%
Reports
708
Location
GE
GE
87.106.189.67
8/10
Confidence
92%
Reports
689
Location
DE
DE
87.106.206.249
8/10
Confidence
92%
Reports
645
Location
DE
DE
104.232.79.58
10/10
Confidence
92%
Reports
614
Location
US
US
45.82.78.106
10/10
Confidence
92%
Reports
568
Location
DE
DE
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.172
- 66.132.172.167
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13