Critical Alert
Security alert: 185.227.153.56 rated 10/10 based on 39 verified incidents.
Threat profile indicates sustained malicious activity with 83% confidence rating.
More threatening than 95% of monitored IPs
IP Address
185.227.153.56
IPv4
Public
GB
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
GB
Location
Cloudie Limited
ASN 55933
39
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
21
SSH
9
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
26. May 2026
Last Activity
8. June 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 55933) with generally good reputation. The ISP Cloudie Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
82%
Verified
Confidence History
1. Sep 2025 - 8. Jun 2026
83%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.227.153.56
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
GB
- ASN
- AS55933
- ISP
- Cloudie Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 39
- First Reported
- 1 Sep 2025
- Last Reported
- 8 Jun 2026, 08:33
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS55933
Cloudie Limited
HK
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
34
Total IPs Monitored
10,081
Total Reports
296.5
Reports per IP
Network Context
This IP address belongs to Cloudie Limited (AS55933), which manages 34 IP addresses in our monitoring system. Out of these, 10,081 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
95
%
Global Threat Ranking
This IP is more threatening than 95% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,753 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
39
avg: 23
++
Network Comparison
Compared against 48 IPs in ASN 55933
Threat Level
10/10
network avg: 7.4
+
Total Reports
39
network avg: 214
--
Network Cloudie Limited has overall threat level 2/10
Geographic Comparison
Compared against 4,299 IPs in GB
Threat Level
10/10
country avg: 5.4
++
Total Reports
39
country avg: 27
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
6 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
25 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
30
SSH
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
84%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.30.40.198
10/10
Confidence
97%
Reports
32
Location
HK
HK
103.56.115.187
10/10
Confidence
97%
Reports
21
Location
HK
HK
103.115.48.20
8/10
Confidence
95%
Reports
11
Location
CN
CN
103.30.41.231
10/10
Confidence
94%
Reports
96
Location
HK
HK
103.140.126.199
10/10
Confidence
94%
Reports
19
Location
CN
CN
123.254.106.193
8/10
Confidence
92%
Reports
17
Location
HK
HK
103.231.14.54
10/10
Confidence
91%
Reports
120
Location
HK
HK
103.115.56.3
10/10
Confidence
91%
Reports
99
Location
HK
HK
144.48.8.10
10/10
Confidence
89%
Reports
101
Location
JP
JP
45.64.74.51
10/10
Confidence
88%
Reports
96
Location
TW
TW
185.239.84.249
10/10
Confidence
84%
Reports
97
Location
HK
HK
185.239.87.249
10/10
Confidence
82%
Reports
35
Location
HK
HK
103.115.48.229
10/10
Confidence
78%
Reports
5
Location
CN
CN
103.30.40.92
10/10
Confidence
75%
Reports
12
Location
HK
HK
185.239.85.154
8/10
Confidence
73%
Reports
9
Location
HK
HK
185.242.234.173
8/10
Confidence
73%
Reports
9
Location
HK
HK
185.242.235.200
8/10
Confidence
72%
Reports
27
Location
HK
HK
185.227.153.14
8/10
Confidence
72%
Reports
7
Location
KR
KR
103.226.124.73
8/10
Confidence
71%
Reports
66
Location
HK
HK
43.252.231.122
10/10
Confidence
71%
Reports
16
Location
HK
HK
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
72%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.196.9.127
8/10
Confidence
100%
Reports
157
ISP
Global-Data Sys...
213.171.208.232
8/10
Confidence
100%
Reports
135
ISP
IONOS SE
213.171.208.62
8/10
Confidence
100%
Reports
122
ISP
IONOS SE
62.232.51.140
8/10
Confidence
100%
Reports
107
ISP
Wavenet Limited
198.38.94.18
10/10
Confidence
100%
Reports
92
ISP
WHG Hosting Ser...
198.38.94.14
10/10
Confidence
100%
Reports
78
ISP
WHG Hosting Ser...
209.42.20.53
8/10
Confidence
100%
Reports
52
ISP
WHG Hosting Ser...
167.71.136.93
10/10
Confidence
100%
Reports
39
ISP
DigitalOcean, LLC
87.106.67.224
8/10
Confidence
100%
Reports
31
ISP
IONOS SE
64.89.160.178
8/10
Confidence
100%
Reports
29
ISP
Ghosty Networks...
94.76.235.103
10/10
Confidence
100%
Reports
27
ISP
Team Blue Carri...
77.68.30.172
10/10
Confidence
100%
Reports
17
ISP
IONOS SE
2.27.36.16
10/10
Confidence
100%
Reports
14
ISP
DpkgSoft Intern...
37.143.61.60
10/10
Confidence
100%
Reports
12
ISP
UK Dedicated Se...
34.39.58.191
8/10
Confidence
99%
Reports
108
ISP
GOOGLE-CLOUD-PL...
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a01:04f8:c012:4640:0000:0000:0000:0001
10/10
Confidence
83%
Reports
19,902
Location
DE
DE
207.90.244.21
8/10
Confidence
83%
Reports
12,280
Location
US
US
207.90.244.22
8/10
Confidence
83%
Reports
12,098
Location
US
US
147.182.202.179
8/10
Confidence
83%
Reports
7,637
Location
US
US
130.12.181.108
8/10
Confidence
83%
Reports
3,208
Location
DE
DE
130.12.181.100
8/10
Confidence
83%
Reports
3,068
Location
DE
DE
2.57.122.208
10/10
Confidence
83%
Reports
2,772
Location
RO
RO
137.184.190.246
8/10
Confidence
83%
Reports
1,975
Location
US
US
80.94.92.71
10/10
Confidence
83%
Reports
1,718
Location
RO
RO
64.62.197.197
8/10
Confidence
83%
Reports
584
Location
US
US
64.62.156.162
8/10
Confidence
83%
Reports
581
Location
US
US
80.94.92.184
10/10
Confidence
83%
Reports
577
Location
RO
RO
65.49.1.162
8/10
Confidence
83%
Reports
562
Location
US
US
77.90.185.17
10/10
Confidence
83%
Reports
449
Location
DE
DE
14.18.190.138
10/10
Confidence
83%
Reports
437
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203