Elevated Risk
Elevated threat level 8/10 for IP 210.79.191.205 from 31 reported incidents.
Behavioral profile indicates cyber threat activity with 96% confidence.
More threatening than 82% of monitored IPs
IP Address
210.79.191.205
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
ID
Location
PT Cloud Hosting Indonesi...
ASN 136052
31
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
15. May 2026
Last Activity
3. June 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 136052) with generally good reputation. The ISP PT Cloud Hosting Indonesia maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
88%
Verified
Confidence History
27. Feb 2026 - 3. Jun 2026
96%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 210.79.191.205
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
ID
- ASN
- AS136052
- ISP
- PT Cloud Hosting Indonesia
DNS Information
- Reverse DNS
- ip210-79-191-205.cloudhost.web.id
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 31
- First Reported
- 20 Feb 2026
- Last Reported
- 3 Jun 2026, 21:21
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS136052
PT Cloud Hosting Indonesia
ID
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
341
Total IPs Monitored
50,007
Total Reports
146.6
Reports per IP
Network Context
This IP address belongs to PT Cloud Hosting Indonesia (AS136052), which manages 341 IP addresses in our monitoring system. Out of these, 50,007 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,742 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
31
avg: 23
+
Network Comparison
Compared against 383 IPs in ASN 136052
Threat Level
8/10
network avg: 7.5
=
Total Reports
31
network avg: 132
--
Network PT Cloud Hosting Indonesia has overall threat level 2/10
Geographic Comparison
Compared against 5,551 IPs in ID
Threat Level
8/10
country avg: 5.4
+
Total Reports
31
country avg: 16
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
3 reports
Daily Average
0.2
reports/day
Most Active
Tuesday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
31
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3%
-
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.76.120.219
8/10
Confidence
100%
Reports
310
Location
ID
ID
103.67.78.201
8/10
Confidence
100%
Reports
48
Location
ID
ID
103.23.198.220
10/10
Confidence
99%
Reports
24
Location
ID
ID
103.59.95.177
10/10
Confidence
98%
Reports
194
Location
ID
ID
27.112.79.152
10/10
Confidence
98%
Reports
126
Location
ID
ID
103.52.114.122
10/10
Confidence
98%
Reports
40
Location
ID
ID
103.186.0.19
8/10
Confidence
97%
Reports
93
Location
ID
ID
210.79.191.178
8/10
Confidence
97%
Reports
77
Location
ID
ID
210.79.191.76
10/10
Confidence
97%
Reports
51
Location
ID
ID
27.112.79.120
8/10
Confidence
97%
Reports
47
Location
ID
ID
27.112.79.97
8/10
Confidence
97%
Reports
47
Location
ID
ID
116.193.191.159
8/10
Confidence
97%
Reports
42
Location
ID
ID
116.193.190.191
8/10
Confidence
97%
Reports
41
Location
ID
ID
103.181.143.73
8/10
Confidence
97%
Reports
39
Location
ID
ID
103.183.75.162
8/10
Confidence
97%
Reports
37
Location
ID
ID
27.112.78.211
8/10
Confidence
97%
Reports
34
Location
ID
ID
103.172.204.152
8/10
Confidence
97%
Reports
34
Location
ID
ID
103.183.74.130
8/10
Confidence
97%
Reports
30
Location
ID
ID
103.174.114.110
8/10
Confidence
97%
Reports
29
Location
ID
ID
210.79.190.107
8/10
Confidence
97%
Reports
24
Location
ID
ID
IPs from the same subnet range, likely same network segment.
17
Related IPs
6.2/10
Avg Threat
61%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
210.79.191.178
8/10
Confidence
97%
Reports
77
Location
ID
ID
210.79.191.76
10/10
Confidence
97%
Reports
51
Location
ID
ID
210.79.191.170
10/10
Confidence
96%
Reports
23
Location
ID
ID
210.79.191.115
10/10
Confidence
86%
Reports
36
Location
ID
ID
210.79.191.199
10/10
Confidence
80%
Reports
91
Location
ID
ID
210.79.191.18
8/10
Confidence
69%
Reports
85
Location
ID
ID
210.79.191.89
8/10
Confidence
68%
Reports
9
Location
ID
ID
210.79.191.147
10/10
Confidence
59%
Reports
4,504
Location
ID
ID
210.79.191.61
8/10
Confidence
59%
Reports
7
Location
ID
ID
210.79.191.174
0/10
Confidence
56%
Reports
4
Location
ID
ID
210.79.191.10
8/10
Confidence
52%
Reports
4
Location
ID
ID
210.79.191.216
8/10
Confidence
51%
Reports
9
Location
ID
ID
210.79.191.44
0/10
Confidence
46%
Reports
3
Location
ID
ID
210.79.191.221
0/10
Confidence
35%
Reports
2
Location
ID
ID
210.79.191.48
0/10
Confidence
30%
Reports
1
Location
ID
ID
210.79.191.159
0/10
Confidence
29%
Reports
2
Location
ID
ID
210.79.191.227
7/10
Confidence
29%
Reports
1
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.76.120.219
8/10
Confidence
100%
Reports
310
ISP
PT Cloud Hostin...
103.177.15.14
10/10
Confidence
100%
Reports
164
ISP
PT Angkasa Pura...
103.84.5.9
10/10
Confidence
100%
Reports
99
ISP
PT Netciti Persada
103.84.7.190
10/10
Confidence
100%
Reports
63
ISP
PT Netciti Persada
202.145.0.61
10/10
Confidence
100%
Reports
50
ISP
PT. Uninet Medi...
103.67.78.201
8/10
Confidence
100%
Reports
48
ISP
PT Cloud Hostin...
116.197.133.25
8/10
Confidence
100%
Reports
46
ISP
PT. Fiber Netwo...
103.132.52.46
10/10
Confidence
100%
Reports
46
ISP
PT. ADEAKSA IND...
182.16.252.18
10/10
Confidence
100%
Reports
41
ISP
INTERLINK TECHN...
139.255.100.188
8/10
Confidence
100%
Reports
28
ISP
Linknet ASN
103.187.146.33
10/10
Confidence
100%
Reports
20
ISP
Cloud Host Pte Ltd
103.8.59.250
10/10
Confidence
99%
Reports
206
ISP
Prime Link Comm...
103.191.14.243
10/10
Confidence
99%
Reports
88
ISP
PT Aplikanusa L...
103.190.214.241
10/10
Confidence
99%
Reports
56
ISP
PT Aplikanusa L...
43.248.27.115
10/10
Confidence
99%
Reports
47
ISP
Neuviz Net
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.58.56.214
8/10
Confidence
96%
Reports
2,336
Location
US
US
18.116.101.220
8/10
Confidence
96%
Reports
2,170
Location
US
US
18.218.118.203
8/10
Confidence
96%
Reports
1,949
Location
US
US
45.148.10.183
10/10
Confidence
96%
Reports
1,929
Location
NL
NL
3.129.187.38
8/10
Confidence
96%
Reports
1,861
Location
US
US
3.130.168.2
8/10
Confidence
96%
Reports
1,647
Location
US
US
3.131.220.121
8/10
Confidence
96%
Reports
1,306
Location
US
US
3.132.26.232
8/10
Confidence
96%
Reports
939
Location
US
US
185.91.127.85
10/10
Confidence
96%
Reports
921
Location
DE
DE
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
3.134.216.108
8/10
Confidence
96%
Reports
740
Location
US
US
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
106.75.184.142
10/10
Confidence
96%
Reports
677
Location
CN
CN
106.75.156.189
10/10
Confidence
96%
Reports
670
Location
CN
CN
106.75.157.47
10/10
Confidence
96%
Reports
661
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203