Extreme Threat
IP 196.251.87.12 classified at threat level 10/10 with 30 documented attacks.
Advanced threat indicators confirmed with 46% certainty.
More threatening than 86% of monitored IPs
IP Address
196.251.87.12
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
NL
Location
CHEAPY-HOST
ASN 401120
30
Reports
Mixed
Data Source
Threat Categories
Hacking
30
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 401120, operated by CHEAPY-HOST) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
46%
Medium Confidence
Confidence History
18. Aug 2025 - 25. Aug 2025
46%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 196.251.87.12
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
NL
- ASN
- AS401120
- ISP
- CHEAPY-HOST
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 30
- First Reported
- 18 Aug 2025
- Last Reported
- 25 Aug 2025, 04:44
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS401120
CHEAPY-HOST
NL
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
210
Total IPs Monitored
42,483
Total Reports
202.3
Reports per IP
Network Context
This IP address belongs to CHEAPY-HOST (AS401120), which manages 210 IP addresses in our monitoring system. Out of these, 42,483 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
86
%
Global Threat Ranking
This IP is more threatening than 86% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,357 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
30
avg: 23
+
Network Comparison
Compared against 210 IPs in ASN 401120
Threat Level
10/10
network avg: 8.4
+
Total Reports
30
network avg: 186
--
Network CHEAPY-HOST has overall threat level 6/10
Geographic Comparison
Compared against 4,355 IPs in NL
Threat Level
10/10
country avg: 6.0
++
Total Reports
30
country avg: 95
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
13 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
30
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8% -
06
Singapore6,475 3.5% -
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
72%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
196.251.86.122
10/10
Confidence
74%
Reports
23
Location
NL
NL
196.251.83.128
8/10
Confidence
73%
Reports
36
Location
SC
SC
196.251.84.239
8/10
Confidence
73%
Reports
24
Location
NL
NL
196.251.81.95
8/10
Confidence
73%
Reports
19
Location
SC
SC
196.251.85.153
8/10
Confidence
73%
Reports
15
Location
NL
NL
196.251.85.158
8/10
Confidence
73%
Reports
13
Location
NL
NL
196.251.84.153
10/10
Confidence
72%
Reports
107
Location
NL
NL
196.251.85.87
8/10
Confidence
72%
Reports
12
Location
NL
NL
196.251.81.30
10/10
Confidence
71%
Reports
279
Location
SC
SC
196.251.80.153
10/10
Confidence
71%
Reports
262
Location
SC
SC
196.251.81.21
10/10
Confidence
71%
Reports
191
Location
SC
SC
196.251.83.156
8/10
Confidence
71%
Reports
138
Location
SC
SC
196.251.85.163
8/10
Confidence
71%
Reports
117
Location
NL
NL
196.251.84.60
10/10
Confidence
71%
Reports
109
Location
NL
NL
196.251.69.157
10/10
Confidence
71%
Reports
71
Location
SC
SC
196.251.71.69
8/10
Confidence
71%
Reports
61
Location
SC
SC
196.251.71.80
10/10
Confidence
71%
Reports
51
Location
SC
SC
196.251.69.46
8/10
Confidence
71%
Reports
40
Location
SC
SC
196.251.86.120
8/10
Confidence
71%
Reports
18
Location
NL
NL
196.251.83.221
8/10
Confidence
71%
Reports
11
Location
SC
SC
IPs from the same subnet range, likely same network segment.
16
Related IPs
8.1/10
Avg Threat
34%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
196.251.87.200
10/10
Confidence
69%
Reports
17
Location
NL
NL
196.251.87.141
10/10
Confidence
67%
Reports
37
Location
NL
NL
196.251.87.42
10/10
Confidence
61%
Reports
165
Location
NL
NL
196.251.87.187
10/10
Confidence
61%
Reports
100
Location
NL
NL
196.251.87.35
10/10
Confidence
59%
Reports
18
Location
NL
NL
196.251.87.53
8/10
Confidence
53%
Reports
6
Location
NL
NL
196.251.87.70
10/10
Confidence
39%
Reports
3
Location
NL
NL
196.251.87.77
7/10
Confidence
21%
Reports
1
Location
NL
NL
196.251.87.191
7/10
Confidence
19%
Reports
1
Location
NL
NL
196.251.87.102
7/10
Confidence
19%
Reports
1
Location
NL
NL
196.251.87.210
7/10
Confidence
17%
Reports
1
Location
NL
NL
196.251.87.235
5/10
Confidence
17%
Reports
1
Location
NL
NL
196.251.87.79
7/10
Confidence
17%
Reports
1
Location
NL
NL
196.251.87.251
8/10
Confidence
12%
Reports
13
Location
NL
NL
196.251.87.57
7/10
Confidence
9%
Reports
11
Location
NL
NL
196.251.87.234
6/10
Confidence
4%
Reports
1
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
52.232.35.131
8/10
Confidence
100%
Reports
106
ISP
Microsoft Corpo...
158.94.210.72
8/10
Confidence
100%
Reports
77
ISP
Omegatech LTD
45.148.10.166
10/10
Confidence
100%
Reports
35
ISP
Techoff Srv Lim...
45.148.10.249
10/10
Confidence
100%
Reports
27
ISP
Techoff Srv Lim...
45.148.10.5
8/10
Confidence
100%
Reports
26
ISP
Techoff Srv Lim...
45.148.10.62
8/10
Confidence
100%
Reports
19
ISP
Techoff Srv Lim...
93.119.1.128
8/10
Confidence
100%
Reports
18
ISP
Signet B.V.
77.246.100.120
10/10
Confidence
100%
Reports
17
ISP
Servers Tech Fzco
20.224.168.82
10/10
Confidence
100%
Reports
16
ISP
Microsoft Corpo...
45.154.98.96
8/10
Confidence
100%
Reports
15
ISP
1337 Services GmbH
46.151.182.172
8/10
Confidence
100%
Reports
13
ISP
Ghosty Networks...
83.83.112.125
10/10
Confidence
100%
Reports
12
ISP
Vodafone Libert...
213.176.16.100
10/10
Confidence
99%
Reports
44
ISP
Global Connecti...
107.189.27.179
10/10
Confidence
99%
Reports
43
ISP
RouterHosting LLC
45.94.31.24
8/10
Confidence
99%
Reports
34
ISP
1337 Services GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.7/10
Avg Threat
46%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
192.42.116.210
10/10
Confidence
46%
Reports
66
Location
NL
NL
20.200.210.155
8/10
Confidence
46%
Reports
47
Location
KR
KR
46.182.4.125
10/10
Confidence
46%
Reports
35
Location
FR
FR
194.26.192.196
6/10
Confidence
46%
Reports
31
Location
NL
NL
169.150.203.235
8/10
Confidence
46%
Reports
31
Location
US
US
209.141.32.218
7/10
Confidence
46%
Reports
28
Location
US
US
154.221.22.20
10/10
Confidence
46%
Reports
22
Location
HK
HK
202.164.57.245
7/10
Confidence
46%
Reports
17
Location
IN
IN
185.220.101.98
8/10
Confidence
46%
Reports
17
Location
DE
DE
126.209.112.104
7/10
Confidence
46%
Reports
16
Location
PH
PH
185.94.82.20
7/10
Confidence
46%
Reports
16
Location
IT
IT
112.207.105.22
7/10
Confidence
46%
Reports
15
Location
PH
PH
103.105.155.27
7/10
Confidence
46%
Reports
15
Location
IN
IN
126.209.112.107
7/10
Confidence
46%
Reports
15
Location
PH
PH
188.2.233.141
7/10
Confidence
46%
Reports
15
Location
RS
RS
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203