Elevated Risk
Elevated threat level 7/10 for IP 66.116.207.52 from 46 reported incidents.
Behavioral profile indicates cyber threat activity with 16% confidence.
More threatening than 55% of monitored IPs
IP Address
66.116.207.52
IPv4
Public
IN
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Moderate Risk
IN
Location
ORACLE-BMC-31898
ASN 31898
46
Reports
Community
Data Source
Threat Categories
Brute-Force
15
WP Login Brute Force
15
DDoS Attack
12
Hacking
11
WP XML-RPC Brute Force
11
WP Cron Abuse
10
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Reputable Network
This IP is hosted on a network (ASN 31898) with generally good reputation. The ISP ORACLE-BMC-31898 maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
14%
Low Confidence
Confidence History
21. Feb 2026 - 2. Mar 2026
16%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| WP XML-RPC Brute Force Hacking WP Login Brute Force +1 | Community x2 | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Cron Abuse DDoS Attack WP XML-RPC Brute Force +1 | Community x2 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x5 | 75% | |
| WP Login Brute Force Brute-Force WP Cron Abuse +1 | Community x5 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x3 | 75% | |
| WP Login Brute Force Brute-Force | Community x3 | 75% | |
| WP Login Brute Force Brute-Force | Community x2 | 75% | |
| WP Login Brute Force Brute-Force WP Resource Exhaustion +1 | Community x4 | 75% | |
| WP Resource Exhaustion DDoS Attack | Community | 75% | |
| WP Resource Exhaustion DDoS Attack WP Cron Abuse | Community x3 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community x2 | 75% | |
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x2 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force WP Cron Abuse +1 | Community x2 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 66.116.207.52
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS31898
- ISP
- ORACLE-BMC-31898
DNS Information
- Reverse DNS
- server.socialbubbles.in
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 46
- First Reported
- 16 Feb 2026
- Last Reported
- 2 Mar 2026, 14:15
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS31898
Oracle Corporation
SG
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
445
Total IPs Monitored
8,338
Total Reports
18.7
Reports per IP
Network Context
This IP address belongs to Oracle Corporation (AS31898), which manages 445 IP addresses in our monitoring system. Out of these, 8,338 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
55
%
Global Threat Ranking
This IP is more threatening than 55% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 154,021 reported IPs worldwide
Threat Level
7/10
avg: 4.8
+
Total Reports
46
avg: 28
++
Network Comparison
Compared against 605 IPs in ASN 31898
Threat Level
7/10
network avg: 5.8
+
Total Reports
46
network avg: 16
++
Network ORACLE-BMC-31898 has overall threat level 2/10
Geographic Comparison
Compared against 15,797 IPs in IN
Threat Level
7/10
country avg: 4.7
++
Total Reports
46
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
16 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
24
Brute-Force
24
DDoS Attack
21
WP Cron Abuse
17
WP XML-RPC Brute Force
16
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
145,499 threat incidents tracked globally • Last 24h: 18,450 Logs
FEED
Top Threat Sources
-
01
United States32,802 22.5% -
02
China23,513 16.2% -
03
India15,797 10.9%
-
04
Brazil7,046 4.8% -
05
Germany6,144 4.2% -
06
Singapore5,766 4%
-
07
Indonesia4,038 2.8% -
08
Netherlands3,761 2.6% -
09
Russia3,704 2.5% -
10
United Kingdom3,679 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
74.91.224.220
8/10
Confidence
100%
Reports
397
Location
SG
SG
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
50.6.226.221
10/10
Confidence
100%
Reports
223
Location
US
US
141.148.33.145
10/10
Confidence
100%
Reports
97
Location
US
US
129.121.41.228
8/10
Confidence
100%
Reports
79
Location
BR
BR
158.179.210.22
10/10
Confidence
100%
Reports
78
Location
ES
ES
50.6.224.46
8/10
Confidence
100%
Reports
65
Location
US
US
66.116.235.214
8/10
Confidence
100%
Reports
63
Location
AE
AE
129.121.76.191
8/10
Confidence
100%
Reports
59
Location
US
US
141.147.175.186
10/10
Confidence
100%
Reports
56
Location
JP
JP
129.121.77.87
8/10
Confidence
100%
Reports
41
Location
US
US
50.6.231.19
8/10
Confidence
100%
Reports
40
Location
US
US
134.185.83.159
8/10
Confidence
100%
Reports
23
Location
SG
SG
132.145.213.106
10/10
Confidence
99%
Reports
98
Location
US
US
193.123.245.198
8/10
Confidence
99%
Reports
97
Location
KR
KR
217.142.142.174
8/10
Confidence
99%
Reports
36
Location
KR
KR
150.136.244.33
8/10
Confidence
99%
Reports
30
Location
US
US
150.136.62.9
8/10
Confidence
99%
Reports
22
Location
US
US
138.2.108.176
8/10
Confidence
99%
Reports
16
Location
SG
SG
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
21%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
220
ISP
Micro Hosting P...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
188.241.62.83
8/10
Confidence
100%
Reports
150
ISP
LEAPSWITCH NETW...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
142.93.215.41
8/10
Confidence
100%
Reports
45
ISP
DigitalOcean, LLC
160.250.204.105
8/10
Confidence
100%
Reports
41
ISP
YOTTA NETWORK S...
194.61.31.157
10/10
Confidence
100%
Reports
27
ISP
Contabo Asia Pr...
148.113.1.176
10/10
Confidence
100%
Reports
25
ISP
OVH SAS
98.130.43.189
10/10
Confidence
100%
Reports
25
ISP
Amazon.com, Inc.
117.250.209.37
10/10
Confidence
100%
Reports
25
ISP
National Intern...
195.250.20.172
8/10
Confidence
100%
Reports
19
ISP
WHG Hosting Ser...
195.250.21.26
8/10
Confidence
100%
Reports
17
ISP
WHG Hosting Ser...
164.52.218.210
8/10
Confidence
100%
Reports
17
ISP
282, Sector 19
103.215.74.60
10/10
Confidence
100%
Reports
12
ISP
SoloRDP
IPs with similar threat level and confidence scores.
15
Related IPs
7.5/10
Avg Threat
16%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.231.202.90
7/10
Confidence
16%
Reports
46
Location
ID
ID
110.78.211.34
7/10
Confidence
16%
Reports
26
Location
TH
TH
66.42.61.4
7/10
Confidence
16%
Reports
23
Location
SG
SG
34.121.204.235
7/10
Confidence
16%
Reports
23
Location
US
US
45.61.186.19
7/10
Confidence
16%
Reports
22
Location
US
US
139.59.19.244
7/10
Confidence
16%
Reports
21
Location
IN
IN
103.157.146.34
7/10
Confidence
16%
Reports
21
Location
ID
ID
69.48.205.45
7/10
Confidence
16%
Reports
20
Location
US
US
51.91.221.125
7/10
Confidence
16%
Reports
20
Location
FR
FR
51.15.161.204
7/10
Confidence
16%
Reports
20
Location
FR
FR
132.148.74.71
7/10
Confidence
16%
Reports
19
Location
US
US
167.172.159.207
8/10
Confidence
16%
Reports
17
Location
US
US
142.214.203.108
10/10
Confidence
16%
Reports
11
Location
US
US
157.230.32.230
7/10
Confidence
16%
Reports
11
Location
SG
SG
138.117.148.157
10/10
Confidence
16%
Reports
11
Location
CL
CL