Extreme Threat
IP 94.74.182.167 is a critical-risk address with a threat level of 10/10 that has generated 688 abuse reports from automated honeypot sensors, indicating sustained and widespread malicious probing activity. The IP is registered to Farahoosh Dena PLC in the United States and was first and last reported during November 2025, suggesting concentrated hostile activity over a short timeframe.
The exceptionally high report volume relative to the detection window points to systematic, multi-vector intrusion attempts that triggered responses across 20 independent honeypot sensors. Despite the notably low activity frequency score of 0/10, the sheer number of distinct reports confirms this address as a persistent threat actor rather than an isolated scanner. With a confidence score of 70%, analysts assess with moderate certainty that the observed behavior represents deliberate malicious activity targeting exposed services, most likely catalogued by defensive infrastructure that correlates patterns across multiple vantage points.
Hacking activity encompasses unauthorized access attempts, vulnerability exploitation and intrusion vectors that can compromise exposed services. This IP reputation crisis stems from automated tools that systematically scan for weak points in perimeter defenses, making any service listening on common ports a potential target. The real-world risk includes credential compromise, data exfiltration or using compromised systems as pivot points for deeper network intrusion. Organizations with SSH, Telnet or similar services directly accessible to this address face immediate exposure to credential stuffing and brute-force attempts.
Site operators should block this address at the network perimeter and implement fail2ban or similar automated tools to dynamically ban repeat offenders. Rate-limiting authentication attempts, enforcing key-based authentication over passwords and deploying multi-factor authentication dramatically reduces the effectiveness of such intrusion campaigns. Continuous log monitoring for source IPs in this range and deploying intrusion detection systems to flag scanning patterns provides early warning of follow-on activity.
KR 
GB 
HK