High Risk
IP 64.65.97.237 rated at threat level 8/10 based on 10 security reports.
Pattern analysis reveals concerning activity. Confidence: 57%.
More threatening than 78% of monitored IPs
IP Address
64.65.97.237
IPv4
Public
SA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Saudi Arabia
Location
Saudi Telecom Company JSC
ASN 39891
10
Reports
Mixed
Data Source
Threat Categories
Brute-Force
9
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 6 days indicates persistent threat actor operations.
First Observed
17. May 2026
Last Activity
23. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 39891) with generally good reputation. The ISP Saudi Telecom Company JSC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
43%
Medium Confidence
Confidence History
17. May 2026 - 23. May 2026
57%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 64.65.97.237
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
SA
- ASN
- AS39891
- ISP
- Saudi Telecom Company JSC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 17 May 2026
- Last Reported
- 23 May 2026, 02:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS39891
Saudi Telecom Company JSC
SA
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
21
Total IPs Monitored
77
Total Reports
3.7
Reports per IP
Network Context
This IP address belongs to Saudi Telecom Company JSC (AS39891), which manages 21 IP addresses in our monitoring system. Out of these, 77 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,774 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
10
avg: 23
--
Network Comparison
Compared against 148 IPs in ASN 39891
Threat Level
8/10
network avg: 5.0
++
Total Reports
10
network avg: 2
++
Network Saudi Telecom Company JSC has overall threat level 2/10
Geographic Comparison
Compared against 560 IPs in SA
Threat Level
8/10
country avg: 5.0
++
Total Reports
10
country avg: 11
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 May 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
9
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.9/10
Avg Threat
42%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
2.90.113.189
8/10
Confidence
65%
Reports
7
Location
SA
SA
51.235.127.170
10/10
Confidence
53%
Reports
4
Location
SA
SA
51.235.217.181
10/10
Confidence
51%
Reports
3
Location
SA
SA
95.186.138.14
8/10
Confidence
49%
Reports
5
Location
SA
SA
5.41.70.68
10/10
Confidence
47%
Reports
3
Location
SA
SA
51.252.187.51
8/10
Confidence
44%
Reports
3
Location
SA
SA
5.41.20.255
0/10
Confidence
40%
Reports
2
Location
SA
SA
64.65.113.83
7/10
Confidence
40%
Reports
2
Location
SA
SA
51.235.111.34
7/10
Confidence
40%
Reports
2
Location
SA
SA
2001:16a4:202:6355:9151:1c9:abe7:62a0
7/10
Confidence
40%
Reports
2
Location
SA
SA
51.235.200.167
0/10
Confidence
40%
Reports
2
Location
SA
SA
95.186.56.96
0/10
Confidence
40%
Reports
2
Location
SA
SA
151.254.88.131
7/10
Confidence
39%
Reports
6
Location
SA
SA
151.254.23.155
7/10
Confidence
38%
Reports
6
Location
SA
SA
66.118.137.169
10/10
Confidence
38%
Reports
5
Location
SA
SA
151.255.68.135
7/10
Confidence
37%
Reports
4
Location
SA
SA
2001:16a4:373:1ab:c49:ac71:b71b:ad29
7/10
Confidence
37%
Reports
4
Location
SA
SA
51.235.163.112
7/10
Confidence
36%
Reports
2
Location
SA
SA
5.41.74.110
10/10
Confidence
33%
Reports
7
Location
SA
SA
151.255.69.167
7/10
Confidence
33%
Reports
3
Location
SA
SA
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
75%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
94.97.4.137
8/10
Confidence
99%
Reports
45
ISP
Saudi Telecom C...
5.42.239.222
8/10
Confidence
97%
Reports
38
ISP
Etihad Salam Te...
94.96.119.209
10/10
Confidence
94%
Reports
231
ISP
Saudi Telecom C...
5.110.133.31
10/10
Confidence
94%
Reports
22
ISP
Etihad Etisalat...
46.152.238.217
8/10
Confidence
88%
Reports
9
ISP
Etihad Etisalat...
43.164.77.109
10/10
Confidence
81%
Reports
11
ISP
Tencent Buildin...
178.73.97.184
8/10
Confidence
72%
Reports
16
ISP
Etihad Etisalat...
2.90.113.189
8/10
Confidence
65%
Reports
7
ISP
Saudi Telecom C...
94.49.10.2
10/10
Confidence
64%
Reports
18
ISP
Saudi Telecom C...
176.18.119.211
8/10
Confidence
63%
Reports
10
ISP
Etihad Etisalat...
94.98.252.235
10/10
Confidence
62%
Reports
54
ISP
Saudi Telecom C...
82.197.58.130
8/10
Confidence
62%
Reports
7
ISP
Mobile Telecomm...
176.18.160.190
10/10
Confidence
62%
Reports
5
ISP
Etihad Etisalat...
37.76.255.70
10/10
Confidence
59%
Reports
4,823
ISP
Integrated Tele...
34.166.132.44
10/10
Confidence
59%
Reports
103
ISP
GOOGLE-CLOUD-PL...
IPs with similar threat level and confidence scores.
15
Related IPs
7.8/10
Avg Threat
57%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
91.92.240.37
5/10
Confidence
57%
Reports
3,444
Location
DE
DE
89.213.174.247
5/10
Confidence
57%
Reports
393
Location
RO
RO
188.166.127.118
8/10
Confidence
57%
Reports
261
Location
NL
NL
158.94.209.8
7/10
Confidence
57%
Reports
253
Location
NL
NL
122.3.88.147
10/10
Confidence
57%
Reports
203
Location
PH
PH
15.235.28.124
8/10
Confidence
57%
Reports
146
Location
CA
CA
188.166.109.145
10/10
Confidence
57%
Reports
136
Location
NL
NL
77.83.39.128
8/10
Confidence
57%
Reports
97
Location
DE
DE
45.84.107.76
8/10
Confidence
57%
Reports
81
Location
SE
SE
68.183.16.91
10/10
Confidence
57%
Reports
79
Location
US
US
103.110.127.136
8/10
Confidence
57%
Reports
57
Location
IN
IN
213.209.157.229
5/10
Confidence
57%
Reports
45
Location
DE
DE
165.22.227.200
10/10
Confidence
57%
Reports
44
Location
CA
CA
78.153.140.195
10/10
Confidence
57%
Reports
40
Location
GB
GB
176.46.138.45
5/10
Confidence
57%
Reports
39
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203