Extreme Threat
IP 181.116.220.140 classified at threat level 10/10 with 115 documented attacks.
Advanced threat indicators confirmed with 89% certainty.
More threatening than 96% of monitored IPs
IP Address
181.116.220.140
IPv4
Public
AR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
AR
Location
Techtel LMDS Comunicacion...
ASN 11664
115
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
12
Exploited Host
5
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
20. May 2026
Last Activity
31. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 11664) with generally good reputation. The ISP Techtel LMDS Comunicaciones Interactivas S.A. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
86%
Verified
Confidence History
16. Mar 2026 - 31. May 2026
89%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 181.116.220.140
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
AR
- ASN
- AS11664
- ISP
- Techtel LMDS Comunicaciones Interactivas S.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 115
- First Reported
- 20 Feb 2026
- Last Reported
- 31 May 2026, 17:28
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS11664
Techtel LMDS Comunicaciones Interactivas S.A.
AR
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
29
Total IPs Monitored
365
Total Reports
12.6
Reports per IP
Network Context
This IP address belongs to Techtel LMDS Comunicaciones Interactivas S.A. (AS11664), which manages 29 IP addresses in our monitoring system. Out of these, 365 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,762 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
115
avg: 23
++
Network Comparison
Compared against 100 IPs in ASN 11664
Threat Level
10/10
network avg: 4.7
++
Total Reports
115
network avg: 5
++
Network Techtel LMDS Comunicaciones Interactivas S.A. has overall threat level 1/10
Geographic Comparison
Compared against 776 IPs in AR
Threat Level
10/10
country avg: 4.9
++
Total Reports
115
country avg: 14
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 May 2026
5 reports
Daily Average
0.5
reports/day
Most Active
Wednesday
31 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
113
Hacking
17
Exploited Host
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.2/10
Avg Threat
57%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
190.220.172.154
10/10
Confidence
97%
Reports
28
Location
AR
AR
186.13.24.118
10/10
Confidence
94%
Reports
59
Location
AR
AR
190.3.9.34
10/10
Confidence
89%
Reports
18
Location
AR
AR
186.158.146.46
8/10
Confidence
88%
Reports
11
Location
AR
AR
190.221.50.123
10/10
Confidence
79%
Reports
76
Location
AR
AR
186.123.101.50
10/10
Confidence
73%
Reports
37
Location
AR
AR
186.182.93.54
8/10
Confidence
72%
Reports
36
Location
AR
AR
186.158.182.21
10/10
Confidence
68%
Reports
8
Location
AR
AR
186.123.182.112
0/10
Confidence
51%
Reports
4
Location
AR
AR
186.122.226.56
0/10
Confidence
51%
Reports
3
Location
AR
AR
200.69.143.251
10/10
Confidence
41%
Reports
3
Location
AR
AR
186.123.7.48
7/10
Confidence
40%
Reports
2
Location
PY
PY
186.123.101.126
0/10
Confidence
40%
Reports
2
Location
AR
AR
190.221.50.210
0/10
Confidence
40%
Reports
2
Location
AR
AR
2803:9800:9405:4684:881c:a8b2:7fb:2b60
7/10
Confidence
39%
Reports
2
Location
AR
AR
200.80.250.75
7/10
Confidence
39%
Reports
2
Location
AR
AR
190.220.47.241
0/10
Confidence
36%
Reports
2
Location
AR
AR
186.13.72.250
10/10
Confidence
35%
Reports
5
Location
AR
AR
190.221.31.114
7/10
Confidence
35%
Reports
2
Location
AR
AR
186.182.233.254
0/10
Confidence
35%
Reports
2
Location
PY
PY
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
181.0.209.22
8/10
Confidence
100%
Reports
35
ISP
Telecom Argenti...
186.56.11.2
10/10
Confidence
100%
Reports
34
ISP
Telefonica de A...
190.244.39.224
10/10
Confidence
100%
Reports
31
ISP
Telecom Argenti...
181.45.193.221
10/10
Confidence
100%
Reports
15
ISP
Telecentro S.A.
181.23.107.93
10/10
Confidence
98%
Reports
192
ISP
Telefonica de A...
200.89.178.151
10/10
Confidence
98%
Reports
65
ISP
Telecom Argenti...
190.245.146.99
8/10
Confidence
98%
Reports
60
ISP
Telecom Argenti...
190.108.60.101
10/10
Confidence
98%
Reports
23
ISP
AGUAS DEL COLOR...
181.97.227.163
10/10
Confidence
98%
Reports
21
ISP
Telecom Argenti...
186.148.224.83
10/10
Confidence
98%
Reports
14
ISP
DODOLINK INTERN...
45.181.45.238
10/10
Confidence
98%
Reports
12
ISP
GENERACION WI-F...
190.220.172.154
10/10
Confidence
97%
Reports
28
ISP
Techtel LMDS Co...
190.179.159.163
8/10
Confidence
97%
Reports
26
ISP
Telefonica de A...
186.39.35.172
8/10
Confidence
97%
Reports
17
ISP
Telefonica de A...
190.183.192.67
10/10
Confidence
94%
Reports
391
ISP
Gigared S.A.
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
152.32.170.55
10/10
Confidence
89%
Reports
2,147
Location
HK
HK
165.227.188.42
8/10
Confidence
89%
Reports
1,540
Location
US
US
165.227.110.45
8/10
Confidence
89%
Reports
1,516
Location
US
US
137.184.112.103
8/10
Confidence
89%
Reports
1,470
Location
US
US
92.63.197.77
8/10
Confidence
89%
Reports
635
Location
UA
UA
45.153.34.32
10/10
Confidence
89%
Reports
622
Location
NL
NL
45.91.64.6
8/10
Confidence
89%
Reports
554
Location
RU
RU
206.189.106.82
8/10
Confidence
89%
Reports
477
Location
NL
NL
184.105.247.252
10/10
Confidence
89%
Reports
439
Location
US
US
64.62.197.152
8/10
Confidence
89%
Reports
420
Location
US
US
65.49.1.212
10/10
Confidence
89%
Reports
365
Location
US
US
185.50.38.135
10/10
Confidence
89%
Reports
267
Location
IR
IR
165.227.18.206
10/10
Confidence
89%
Reports
227
Location
US
US
176.65.149.45
10/10
Confidence
89%
Reports
224
Location
NL
NL
36.111.150.151
10/10
Confidence
89%
Reports
221
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203