Extreme Threat
IP 176.65.134.22 classified at threat level 10/10 with 52 documented attacks.
Advanced threat indicators confirmed with 66% certainty.
More threatening than 92% of monitored IPs
IP Address
176.65.134.22
IPv4
Public
SI
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
SI
Location
NETIFACELLC
ASN 36680
52
Reports
Honeypot
Data Source
Threat Categories
Hacking
21
Web App Attack
5
SSH
5
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 36680) with generally good reputation. The ISP NETIFACELLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
63%
High Confidence
Confidence History
8. Feb 2026 - 19. Mar 2026
66%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Web App Attack Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 176.65.134.22
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SI
- ASN
- AS36680
- ISP
- NETIFACELLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 52
- First Reported
- 23 Jan 2026
- Last Reported
- 19 Mar 2026, 16:10
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS36680
Netiface LLC
SI
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
41
Total IPs Monitored
21,811
Total Reports
532
Reports per IP
Network Context
This IP address belongs to Netiface LLC (AS36680), which manages 41 IP addresses in our monitoring system. Out of these, 21,811 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,335 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
52
avg: 23
++
Network Comparison
Compared against 57 IPs in ASN 36680
Threat Level
10/10
network avg: 6.9
+
Total Reports
52
network avg: 417
--
Network NETIFACELLC has overall threat level 1/10
Geographic Comparison
Compared against 20 IPs in SI
Threat Level
10/10
country avg: 5.1
++
Total Reports
52
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
15 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
43
SSH
20
Web App Attack
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8% -
06
Singapore6,475 3.5% -
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
31.57.184.107
8/10
Confidence
100%
Reports
202
Location
US
US
31.57.184.104
8/10
Confidence
99%
Reports
101
Location
US
US
130.12.182.185
10/10
Confidence
98%
Reports
33
Location
US
US
130.12.181.85
10/10
Confidence
98%
Reports
20
Location
US
US
130.12.181.151
10/10
Confidence
95%
Reports
38
Location
US
US
130.12.181.102
8/10
Confidence
94%
Reports
1,342
Location
DE
DE
130.12.181.101
8/10
Confidence
94%
Reports
1,326
Location
DE
DE
130.12.181.97
8/10
Confidence
94%
Reports
1,322
Location
DE
DE
130.12.181.99
8/10
Confidence
94%
Reports
1,316
Location
DE
DE
130.12.181.106
8/10
Confidence
94%
Reports
1,315
Location
DE
DE
130.12.181.105
8/10
Confidence
94%
Reports
1,312
Location
DE
DE
130.12.181.107
8/10
Confidence
94%
Reports
1,312
Location
DE
DE
130.12.181.103
8/10
Confidence
94%
Reports
1,304
Location
DE
DE
130.12.181.109
8/10
Confidence
94%
Reports
1,278
Location
DE
DE
130.12.181.98
8/10
Confidence
93%
Reports
1,224
Location
DE
DE
31.57.216.36
10/10
Confidence
92%
Reports
13
Location
AE
AE
31.57.184.195
8/10
Confidence
91%
Reports
52
Location
US
US
31.57.184.191
8/10
Confidence
91%
Reports
52
Location
US
US
31.57.184.204
7/10
Confidence
91%
Reports
37
Location
US
US
130.12.181.157
10/10
Confidence
89%
Reports
64
Location
US
US
IPs from the same subnet range, likely same network segment.
9
Related IPs
7.2/10
Avg Threat
55%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
176.65.134.34
10/10
Confidence
85%
Reports
749
Location
DE
DE
176.65.134.24
10/10
Confidence
74%
Reports
15
Location
SI
SI
176.65.134.15
10/10
Confidence
67%
Reports
215
Location
DE
DE
176.65.134.8
10/10
Confidence
59%
Reports
29,990
Location
DE
DE
176.65.134.7
7/10
Confidence
59%
Reports
26,776
Location
DE
DE
176.65.134.20
10/10
Confidence
58%
Reports
110
Location
SI
SI
176.65.134.36
0/10
Confidence
40%
Reports
2
Location
SI
SI
176.65.134.27
0/10
Confidence
36%
Reports
2
Location
SI
SI
176.65.134.4
8/10
Confidence
13%
Reports
4
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
4.8/10
Avg Threat
41%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
176.65.134.24
10/10
Confidence
74%
Reports
15
ISP
Netiface LLC
176.117.107.85
8/10
Confidence
69%
Reports
6
ISP
NETIFACELLC
176.65.134.20
10/10
Confidence
58%
Reports
110
ISP
NETIFACELLC
31.7.207.99
8/10
Confidence
46%
Reports
5
ISP
XENYA inzenirin...
93.103.76.180
8/10
Confidence
44%
Reports
5
ISP
T-2, d.o.o.
176.117.107.5
0/10
Confidence
40%
Reports
4
ISP
NETIFACELLC
176.65.134.36
0/10
Confidence
40%
Reports
2
ISP
Netiface LLC
93.103.182.232
7/10
Confidence
36%
Reports
5
ISP
T-2, d.o.o.
176.65.134.27
0/10
Confidence
36%
Reports
2
ISP
Netiface LLC
93.103.93.136
0/10
Confidence
30%
Reports
3
ISP
T-2, d.o.o.
86.61.96.114
7/10
Confidence
30%
Reports
1
ISP
Telekom Sloveni...
84.255.240.164
0/10
Confidence
30%
Reports
1
ISP
T-2, d.o.o.
188.198.23.144
0/10
Confidence
30%
Reports
1
ISP
Telekom Sloveni...
46.23.2.173
8/10
Confidence
26%
Reports
3
ISP
RETIP Informaci...
77.38.104.186
6/10
Confidence
23%
Reports
1
ISP
Telemach Sloven...
IPs with similar threat level and confidence scores.
15
Related IPs
9.9/10
Avg Threat
66%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
66.132.153.51
10/10
Confidence
66%
Reports
1,778
Location
US
US
66.132.153.56
10/10
Confidence
66%
Reports
1,696
Location
US
US
66.132.153.53
10/10
Confidence
66%
Reports
1,533
Location
US
US
66.132.153.49
10/10
Confidence
66%
Reports
1,471
Location
US
US
161.97.159.246
10/10
Confidence
66%
Reports
943
Location
FR
FR
176.120.22.47
8/10
Confidence
66%
Reports
881
Location
RU
RU
35.200.237.19
10/10
Confidence
66%
Reports
880
Location
IN
IN
103.174.103.249
10/10
Confidence
66%
Reports
780
Location
IN
IN
87.121.84.24
10/10
Confidence
66%
Reports
746
Location
US
US
154.83.16.198
10/10
Confidence
66%
Reports
725
Location
HK
HK
87.120.191.65
10/10
Confidence
66%
Reports
720
Location
US
US
185.217.0.130
10/10
Confidence
66%
Reports
717
Location
SE
SE
36.50.54.13
10/10
Confidence
66%
Reports
634
Location
VN
VN
63.41.9.210
10/10
Confidence
66%
Reports
619
Location
US
US
45.149.204.47
10/10
Confidence
66%
Reports
615
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203