Significant Threat
IP 168.253.248.179 identified as significant threat (8/10) from 14 events.
Multiple malicious indicators detected. Confidence level: 53%.
More threatening than 78% of monitored IPs
IP Address
168.253.248.179
IPv4
Public
MW
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Malawi
Location
TELEKOM-NETWORKS-MALAWI
ASN 36913
14
Reports
Mixed
Data Source
Threat Categories
Brute-Force
13
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
15. May 2026
Last Activity
11. June 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 36913) with elevated threat levels. The ISP TELEKOM-NETWORKS-MALAWI hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
52%
High Confidence
Confidence History
15. May 2026 - 11. Jun 2026
53%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 168.253.248.179
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
MW
- ASN
- AS36913
- ISP
- TELEKOM-NETWORKS-MALAWI
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 15 May 2026
- Last Reported
- 11 Jun 2026, 08:03
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS36913
TELEKOM-NETWORKS-MALAWI
MW
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
3
Total Reports
3
Reports per IP
Network Context
This IP address belongs to TELEKOM-NETWORKS-MALAWI (AS36913), which manages 1 IP addresses in our monitoring system. Out of these, 3 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 208,914 reported IPs worldwide
Threat Level
8/10
avg: 5.4
+
Total Reports
14
avg: 22
-
Network Comparison
Compared against 2 IPs in ASN 36913
Threat Level
8/10
network avg: 4.0
++
Total Reports
14
network avg: 8
++
Network TELEKOM-NETWORKS-MALAWI has overall threat level 10/10
Geographic Comparison
Compared against 21 IPs in MW
Threat Level
8/10
country avg: 6.5
+
Total Reports
14
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
2 reports
Daily Average
0.5
reports/day
Most Active
Tuesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
13
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
195,866 threat incidents tracked globally • Last 24h: 17,225 Logs
FEED
Top Threat Sources
-
01
United States40,017 20.4% -
02
India31,255 16% -
03
China26,695 13.6% -
04
Brazil10,639 5.4% -
05
Germany7,413 3.8% -
06
Singapore6,670 3.4% -
07
Indonesia5,827 3% -
08
Pakistan5,064 2.6% -
09
Russia5,000 2.6% -
10
Netherlands4,546 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
0/10
Avg Threat
35%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
6.6/10
Avg Threat
34%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
105.234.156.197
8/10
Confidence
62%
Reports
5
ISP
AIRTEL
102.70.93.137
8/10
Confidence
48%
Reports
4
ISP
TNM
102.70.90.28
8/10
Confidence
46%
Reports
3
ISP
TNM
41.70.10.10
8/10
Confidence
45%
Reports
4
ISP
MAREN
41.75.114.30
10/10
Confidence
44%
Reports
3
ISP
SKYBAND
102.70.95.235
7/10
Confidence
37%
Reports
2
ISP
TNM
102.70.86.105
0/10
Confidence
35%
Reports
2
ISP
TELEKOM-NETWORK...
102.70.91.158
7/10
Confidence
31%
Reports
3
ISP
TNM
102.213.28.44
7/10
Confidence
29%
Reports
1
ISP
Department of E...
137.115.3.45
6/10
Confidence
23%
Reports
1
ISP
Airtel Malawi Ltd
137.115.2.114
6/10
Confidence
23%
Reports
1
ISP
Airtel Malawi Ltd
137.115.2.91
6/10
Confidence
23%
Reports
1
ISP
Airtel Malawi Ltd
137.115.5.105
6/10
Confidence
23%
Reports
1
ISP
Airtel Malawi Ltd
105.234.176.246
6/10
Confidence
23%
Reports
1
ISP
Airtel Malawi Ltd
102.213.28.48
6/10
Confidence
23%
Reports
1
ISP
Department of E...
IPs with similar threat level and confidence scores.
15
Related IPs
8.1/10
Avg Threat
53%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
199.195.249.231
7/10
Confidence
53%
Reports
203
Location
US
US
107.189.30.53
7/10
Confidence
53%
Reports
164
Location
LU
LU
192.42.116.214
8/10
Confidence
53%
Reports
77
Location
NL
NL
95.85.238.19
7/10
Confidence
53%
Reports
60
Location
CZ
CZ
110.39.1.22
7/10
Confidence
53%
Reports
32
Location
PK
PK
121.200.216.13
10/10
Confidence
53%
Reports
32
Location
VN
VN
190.92.175.228
10/10
Confidence
53%
Reports
22
Location
IN
IN
103.171.117.54
7/10
Confidence
53%
Reports
21
Location
IN
IN
103.93.105.155
7/10
Confidence
53%
Reports
20
Location
IN
IN
41.174.98.95
8/10
Confidence
53%
Reports
17
Location
ZW
ZW
45.156.87.40
10/10
Confidence
53%
Reports
16
Location
NL
NL
8.221.137.196
10/10
Confidence
53%
Reports
14
Location
JP
JP
103.135.229.166
8/10
Confidence
53%
Reports
14
Location
IN
IN
160.250.122.160
8/10
Confidence
53%
Reports
14
Location
PK
PK
103.91.72.201
8/10
Confidence
53%
Reports
14
Location
IN
IN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 51.68.207.118
- 176.65.149.64
- 193.32.162.28
- 80.94.92.183
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203