High Risk
IP 197.101.218.163 rated at threat level 7/10 based on 6 security reports.
Pattern analysis reveals concerning activity. Confidence: 5%.
More threatening than 54% of monitored IPs
IP Address
197.101.218.163
IPv4
Public
ZA
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Moderate Risk
ZA
Location
INTERNET-SOLUTIONS
ASN 20011
6
Reports
Community
Data Source
Threat Categories
Brute-Force
3
WP Login Brute Force
3
WP REST API Abuse
2
WP User Enumeration
2
Hacking
1
WP XML-RPC Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Reputable Network
This IP is hosted on a network (ASN 20011) with generally good reputation. The ISP INTERNET-SOLUTIONS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
4%
Low Confidence
Confidence History
3. Sep 2025
5%
Current
Stable
Trend
Security Reports (6)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP REST API Abuse WP User Enumeration | Community | 75% | |
| WP User Enumeration WP REST API Abuse | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 197.101.218.163
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
ZA
- ASN
- AS20011
- ISP
- INTERNET-SOLUTIONS
DNS Information
- Reverse DNS
- 197-101-218-163.ip.broadband.is
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 6
- First Reported
- 3 Sep 2025
- Last Reported
- 3 Sep 2025, 08:55
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS20011
NTT-DATA-Inc
ZA
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
8
Total IPs Monitored
22
Total Reports
2.8
Reports per IP
Network Context
This IP address belongs to NTT-DATA-Inc (AS20011), which manages 8 IP addresses in our monitoring system. Out of these, 22 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
54
%
Global Threat Ranking
This IP is more threatening than 54% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 155,000 reported IPs worldwide
Threat Level
7/10
avg: 4.8
+
Total Reports
6
avg: 28
--
Network Comparison
Compared against 14 IPs in ASN 20011
Threat Level
7/10
network avg: 3.7
++
Total Reports
6
network avg: 3
++
Network INTERNET-SOLUTIONS has overall threat level 3/10
Geographic Comparison
Compared against 550 IPs in ZA
Threat Level
7/10
country avg: 4.3
++
Total Reports
6
country avg: 6
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
3
Brute-Force
3
WP User Enumeration
2
WP REST API Abuse
2
WP XML-RPC Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
146,283 threat incidents tracked globally • Last 24h: 19,247 Logs
FEED
Top Threat Sources
-
01
United States32,959 22.5% -
02
China23,567 16.1% -
03
India15,935 10.9% -
04
Brazil7,146 4.9% -
05
Germany6,181 4.2% -
06
Singapore5,773 3.9% -
07
Indonesia4,047 2.8% -
08
Netherlands3,791 2.6% -
09
Russia3,716 2.5% -
10
United Kingdom3,700 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
13
Related IPs
3.5/10
Avg Threat
34%
Avg Confidence
2
High Threat
196.39.254.245
8/10
Confidence
95%
Reports
21
Location
ZA
ZA
197.91.186.139
0/10
Confidence
56%
Reports
4
Location
ZA
ZA
197.95.62.204
0/10
Confidence
48%
Reports
2
Location
ZA
ZA
197.95.59.82
0/10
Confidence
46%
Reports
3
Location
ZA
ZA
152.110.199.204
0/10
Confidence
30%
Reports
1
Location
ZA
ZA
197.89.151.13
0/10
Confidence
30%
Reports
1
Location
ZA
ZA
197.89.11.232
7/10
Confidence
25%
Reports
2
Location
ZA
ZA
168.210.129.37
6/10
Confidence
23%
Reports
1
Location
ZA
ZA
197.95.91.192
6/10
Confidence
23%
Reports
1
Location
ZA
ZA
196.39.57.163
6/10
Confidence
23%
Reports
1
Location
ZA
ZA
197.95.93.87
0/10
Confidence
22%
Reports
1
Location
ZA
ZA
196.39.9.238
6/10
Confidence
22%
Reports
1
Location
ZA
ZA
197.94.52.177
6/10
Confidence
4%
Reports
1
Location
ZA
ZA
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
13.246.179.73
8/10
Confidence
99%
Reports
24
ISP
Amazon.com, Inc.
102.210.149.236
10/10
Confidence
97%
Reports
25
ISP
KoTDA
41.181.156.205
10/10
Confidence
96%
Reports
34
ISP
MTN Business So...
41.76.214.94
8/10
Confidence
96%
Reports
20
ISP
AFRIHOST-SP
102.210.148.92
10/10
Confidence
95%
Reports
94
ISP
KoTDA
196.39.254.245
8/10
Confidence
95%
Reports
21
ISP
NTT-DATA-Inc
196.11.179.75
8/10
Confidence
95%
Reports
21
ISP
ACCELERIT
93.152.208.42
10/10
Confidence
94%
Reports
264
ISP
IPv
93.152.208.38
8/10
Confidence
94%
Reports
246
ISP
IPv
93.152.208.26
8/10
Confidence
94%
Reports
244
ISP
IPv
93.152.208.14
10/10
Confidence
94%
Reports
142
ISP
IPv
93.152.208.18
8/10
Confidence
94%
Reports
127
ISP
IPv
168.76.131.178
10/10
Confidence
94%
Reports
80
ISP
ASLINE LIMITED
169.239.47.178
10/10
Confidence
94%
Reports
69
ISP
Perlcom-iSPOT
164.151.136.50
10/10
Confidence
94%
Reports
42
ISP
SITA-AS
IPs with similar threat level and confidence scores.
15
Related IPs
8/10
Avg Threat
5%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a01:4f8:c2c:e628::1
8/10
Confidence
5%
Reports
13
Location
DE
DE
34.106.41.249
8/10
Confidence
5%
Reports
12
Location
US
US
34.56.118.179
7/10
Confidence
5%
Reports
11
Location
US
US
20.52.16.104
8/10
Confidence
5%
Reports
11
Location
DE
DE
185.125.50.23
10/10
Confidence
5%
Reports
11
Location
DE
DE
200.63.100.137
8/10
Confidence
5%
Reports
11
Location
CL
CL
152.53.103.246
8/10
Confidence
5%
Reports
10
Location
AT
AT
36.83.126.146
8/10
Confidence
5%
Reports
10
Location
ID
ID
40.123.197.157
8/10
Confidence
5%
Reports
10
Location
AE
AE
35.216.145.137
7/10
Confidence
5%
Reports
10
Location
CH
CH
103.4.250.175
8/10
Confidence
5%
Reports
10
Location
US
US
103.4.251.253
8/10
Confidence
5%
Reports
10
Location
US
US
34.248.137.227
8/10
Confidence
5%
Reports
10
Location
IE
IE
20.171.207.127
8/10
Confidence
5%
Reports
10
Location
US
US
2001:bc8:1201:1c:b283:feff:fee6:f31b
8/10
Confidence
5%
Reports
10
Location
FR
FR