Extreme Threat
IP 69.6.221.248 classified at threat level 10/10 with 41 documented attacks.
Advanced threat indicators confirmed with 99% certainty.
More threatening than 100% of monitored IPs
IP Address
69.6.221.248
IPv4
Public
BR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
BR
Location
Oracle Corporation
ASN 31898
41
Reports
Honeypot
Data Source
Threat Categories
SSH
27
Hacking
7
Exploited Host
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
11. May 2026
Last Activity
28. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 31898) with generally good reputation. The ISP Oracle Corporation maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
6/10
Moderate
Confidence Score
95%
Verified
Confidence History
15. Apr 2026 - 28. May 2026
99%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 69.6.221.248
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
BR
- ASN
- AS31898
- ISP
- Oracle Corporation
DNS Information
- Reverse DNS
- 69-6-221-248.unifiedlayer.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 41
- First Reported
- 7 Apr 2026
- Last Reported
- 28 May 2026, 13:15
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS31898
Oracle Corporation
SG
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
445
Total IPs Monitored
8,338
Total Reports
18.7
Reports per IP
Network Context
This IP address belongs to Oracle Corporation (AS31898), which manages 445 IP addresses in our monitoring system. Out of these, 8,338 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,372 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
41
avg: 23
++
Network Comparison
Compared against 705 IPs in ASN 31898
Threat Level
10/10
network avg: 6.1
++
Total Reports
41
network avg: 16
++
Network Oracle Corporation has overall threat level 2/10
Geographic Comparison
Compared against 10,256 IPs in BR
Threat Level
10/10
country avg: 5.5
++
Total Reports
41
country avg: 14
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
7 reports
Daily Average
0.4
reports/day
Most Active
Tuesday
13 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
38
Hacking
8
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5%
-
05
Germany7,139 3.8% -
06
Singapore6,475 3.5%
-
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.4/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
50.6.226.221
10/10
Confidence
100%
Reports
223
Location
US
US
158.179.210.22
10/10
Confidence
100%
Reports
87
Location
ES
ES
50.6.224.46
8/10
Confidence
100%
Reports
85
Location
US
US
129.121.76.191
8/10
Confidence
100%
Reports
82
Location
US
US
129.121.41.228
8/10
Confidence
100%
Reports
79
Location
BR
BR
66.116.235.214
8/10
Confidence
100%
Reports
63
Location
AE
AE
50.6.231.19
8/10
Confidence
100%
Reports
57
Location
US
US
141.147.175.186
10/10
Confidence
100%
Reports
56
Location
JP
JP
150.136.244.33
8/10
Confidence
100%
Reports
47
Location
US
US
129.121.77.87
8/10
Confidence
100%
Reports
44
Location
US
US
161.118.210.105
8/10
Confidence
100%
Reports
32
Location
SG
SG
150.136.129.10
10/10
Confidence
100%
Reports
32
Location
US
US
161.118.200.79
8/10
Confidence
100%
Reports
29
Location
SG
SG
134.185.83.159
8/10
Confidence
100%
Reports
26
Location
SG
SG
213.35.123.95
8/10
Confidence
100%
Reports
25
Location
SG
SG
66.116.199.98
8/10
Confidence
100%
Reports
23
Location
IN
IN
161.118.203.255
8/10
Confidence
100%
Reports
19
Location
SG
SG
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
129.121.41.228
8/10
Confidence
100%
Reports
79
ISP
Oracle Corporation
200.142.101.178
8/10
Confidence
100%
Reports
63
ISP
MUNDIVOX DO BRA...
177.54.150.128
8/10
Confidence
100%
Reports
39
ISP
Latitude.sh LTDA
201.77.124.248
10/10
Confidence
100%
Reports
31
ISP
Desktop Sigmane...
20.226.60.108
8/10
Confidence
100%
Reports
25
ISP
Microsoft Corpo...
187.33.251.218
10/10
Confidence
100%
Reports
22
ISP
TELY Ltda.
4.228.83.111
8/10
Confidence
100%
Reports
17
ISP
Microsoft Corpo...
43.164.195.69
10/10
Confidence
100%
Reports
16
ISP
Tencent Buildin...
179.127.10.197
8/10
Confidence
99%
Reports
84
ISP
Under Servicos ...
152.250.243.47
10/10
Confidence
99%
Reports
63
ISP
TELEFONICA BRAS...
177.141.9.161
8/10
Confidence
99%
Reports
39
ISP
Claro NXT Telec...
43.157.163.155
10/10
Confidence
99%
Reports
34
ISP
Tencent Buildin...
167.249.227.120
8/10
Confidence
99%
Reports
34
ISP
UNIFIQUE TELECO...
69.6.251.43
10/10
Confidence
99%
Reports
14
ISP
Oracle Corporation
45.169.128.70
10/10
Confidence
98%
Reports
74
ISP
THM Tecnologia ...
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.8.59.250
10/10
Confidence
99%
Reports
206
Location
ID
ID
77.90.185.37
8/10
Confidence
99%
Reports
202
Location
DE
DE
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP
220.71.199.64
10/10
Confidence
99%
Reports
155
Location
KR
KR
87.121.84.81
8/10
Confidence
99%
Reports
152
Location
US
US
121.200.217.28
8/10
Confidence
99%
Reports
151
Location
VN
VN
121.168.139.251
10/10
Confidence
99%
Reports
146
Location
KR
KR
38.95.35.85
8/10
Confidence
99%
Reports
133
Location
US
US
196.189.237.92
10/10
Confidence
99%
Reports
111
Location
ET
ET
34.39.58.191
8/10
Confidence
99%
Reports
108
Location
GB
GB
141.148.33.145
10/10
Confidence
99%
Reports
104
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203