Extreme Threat
IP 5.41.70.68 classified at threat level 10/10 with 3 documented attacks.
Advanced threat indicators confirmed with 47% certainty.
More threatening than 86% of monitored IPs
IP Address
5.41.70.68
IPv4
Public
SA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Saudi Arabia
Location
Saudi Telecom Company JSC
ASN 39891
3
Reports
Honeypot
Data Source
Threat Categories
Hacking
3
Exploited Host
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
18. May 2026
Last Activity
18. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 39891) with generally good reputation. The ISP Saudi Telecom Company JSC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
38%
Medium Confidence
Confidence History
4. May 2026 - 18. May 2026
47%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 5.41.70.68
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
SA
- ASN
- AS39891
- ISP
- Saudi Telecom Company JSC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 3
- First Reported
- 4 May 2026
- Last Reported
- 18 May 2026, 17:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS39891
Saudi Telecom Company JSC
SA
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
21
Total IPs Monitored
77
Total Reports
3.7
Reports per IP
Network Context
This IP address belongs to Saudi Telecom Company JSC (AS39891), which manages 21 IP addresses in our monitoring system. Out of these, 77 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
86
%
Global Threat Ranking
This IP is more threatening than 86% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,936 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
3
avg: 23
--
Network Comparison
Compared against 148 IPs in ASN 39891
Threat Level
10/10
network avg: 5.0
++
Total Reports
3
network avg: 2
++
Network Saudi Telecom Company JSC has overall threat level 2/10
Geographic Comparison
Compared against 560 IPs in SA
Threat Level
10/10
country avg: 5.0
++
Total Reports
3
country avg: 11
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 May 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Monday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
3
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,879 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5% -
02
India29,222 15.6% -
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.8/10
Avg Threat
43%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
2.90.113.189
8/10
Confidence
65%
Reports
7
Location
SA
SA
64.65.97.237
8/10
Confidence
57%
Reports
10
Location
SA
SA
51.235.127.170
10/10
Confidence
53%
Reports
4
Location
SA
SA
51.235.217.181
10/10
Confidence
51%
Reports
3
Location
SA
SA
95.186.138.14
8/10
Confidence
49%
Reports
5
Location
SA
SA
51.252.187.51
8/10
Confidence
44%
Reports
3
Location
SA
SA
5.41.20.255
0/10
Confidence
40%
Reports
2
Location
SA
SA
64.65.113.83
7/10
Confidence
40%
Reports
2
Location
SA
SA
51.235.111.34
7/10
Confidence
40%
Reports
2
Location
SA
SA
2001:16a4:202:6355:9151:1c9:abe7:62a0
7/10
Confidence
40%
Reports
2
Location
SA
SA
51.235.200.167
0/10
Confidence
40%
Reports
2
Location
SA
SA
95.186.56.96
0/10
Confidence
40%
Reports
2
Location
SA
SA
151.254.88.131
7/10
Confidence
39%
Reports
6
Location
SA
SA
151.254.23.155
7/10
Confidence
38%
Reports
6
Location
SA
SA
66.118.137.169
10/10
Confidence
38%
Reports
5
Location
SA
SA
151.255.68.135
7/10
Confidence
37%
Reports
4
Location
SA
SA
2001:16a4:373:1ab:c49:ac71:b71b:ad29
7/10
Confidence
37%
Reports
4
Location
SA
SA
51.235.163.112
7/10
Confidence
36%
Reports
2
Location
SA
SA
5.41.74.110
10/10
Confidence
33%
Reports
7
Location
SA
SA
151.255.69.167
7/10
Confidence
33%
Reports
3
Location
SA
SA
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
75%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
94.97.4.137
8/10
Confidence
99%
Reports
45
ISP
Saudi Telecom C...
5.42.239.222
8/10
Confidence
97%
Reports
38
ISP
Etihad Salam Te...
94.96.119.209
10/10
Confidence
94%
Reports
231
ISP
Saudi Telecom C...
5.110.133.31
10/10
Confidence
94%
Reports
22
ISP
Etihad Etisalat...
46.152.238.217
8/10
Confidence
88%
Reports
9
ISP
Etihad Etisalat...
43.164.77.109
10/10
Confidence
81%
Reports
11
ISP
Tencent Buildin...
178.73.97.184
8/10
Confidence
72%
Reports
16
ISP
Etihad Etisalat...
2.90.113.189
8/10
Confidence
65%
Reports
7
ISP
Saudi Telecom C...
94.49.10.2
10/10
Confidence
64%
Reports
18
ISP
Saudi Telecom C...
176.18.119.211
8/10
Confidence
63%
Reports
10
ISP
Etihad Etisalat...
94.98.252.235
10/10
Confidence
62%
Reports
54
ISP
Saudi Telecom C...
82.197.58.130
8/10
Confidence
62%
Reports
7
ISP
Mobile Telecomm...
176.18.160.190
10/10
Confidence
62%
Reports
5
ISP
Etihad Etisalat...
37.76.255.70
10/10
Confidence
59%
Reports
4,823
ISP
Integrated Tele...
34.166.132.44
10/10
Confidence
59%
Reports
103
ISP
GOOGLE-CLOUD-PL...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
47%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.197.69.115
10/10
Confidence
47%
Reports
47
Location
US
US
169.150.203.237
8/10
Confidence
47%
Reports
41
Location
US
US
50.116.9.129
10/10
Confidence
47%
Reports
40
Location
US
US
185.200.240.65
10/10
Confidence
47%
Reports
40
Location
RU
RU
159.89.141.53
10/10
Confidence
47%
Reports
37
Location
US
US
205.185.121.77
8/10
Confidence
47%
Reports
33
Location
US
US
209.141.54.4
7/10
Confidence
47%
Reports
27
Location
US
US
43.156.116.171
10/10
Confidence
47%
Reports
23
Location
SG
SG
178.176.84.60
10/10
Confidence
47%
Reports
22
Location
RU
RU
117.247.51.92
7/10
Confidence
47%
Reports
18
Location
IN
IN
185.197.195.89
10/10
Confidence
47%
Reports
18
Location
DE
DE
103.62.153.61
7/10
Confidence
47%
Reports
18
Location
PH
PH
103.105.155.27
7/10
Confidence
47%
Reports
16
Location
IN
IN
183.88.242.105
7/10
Confidence
47%
Reports
16
Location
TH
TH
63.180.175.164
7/10
Confidence
47%
Reports
16
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203