Extreme Threat
IP 94.85.241.161 classified at threat level 10/10 with 110 documented attacks.
Advanced threat indicators confirmed with 70% certainty.
More threatening than 92% of monitored IPs
IP Address
94.85.241.161
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
IT
Location
TIM
ASN 3269
110
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
30
Hacking
6
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
11. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 3269) with generally good reputation. The ISP TIM maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
3/10
Low
Confidence Score
63%
High Confidence
Confidence History
3. Sep 2025 - 11. May 2026
70%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Exploited Host | Honeypot x4 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 94.85.241.161
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS3269
- ISP
- TIM
DNS Information
- Reverse DNS
- host-94-85-241-161.business.telecomitalia.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 110
- First Reported
- 2 Sep 2025
- Last Reported
- 11 May 2026, 13:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS3269
TIM
IT
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
74
Total IPs Monitored
964
Total Reports
13
Reports per IP
Network Context
This IP address belongs to TIM (AS3269), which manages 74 IP addresses in our monitoring system. Out of these, 964 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,719 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
110
avg: 23
++
Network Comparison
Compared against 114 IPs in ASN 3269
Threat Level
10/10
network avg: 4.9
++
Total Reports
110
network avg: 10
++
Network TIM has overall threat level 2/10
Geographic Comparison
Compared against 1,034 IPs in IT
Threat Level
10/10
country avg: 4.4
++
Total Reports
110
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 May 2026
4 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
55 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
110
Hacking
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 14 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
83%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
79.3.96.178
10/10
Confidence
99%
Reports
52
Location
IT
IT
79.55.224.44
10/10
Confidence
99%
Reports
36
Location
IT
IT
5.99.196.202
10/10
Confidence
99%
Reports
19
Location
IT
IT
95.231.249.182
10/10
Confidence
99%
Reports
19
Location
IT
IT
79.36.191.212
8/10
Confidence
97%
Reports
24
Location
IT
IT
95.239.158.82
8/10
Confidence
95%
Reports
14
Location
IT
IT
31.195.210.101
10/10
Confidence
94%
Reports
62
Location
IT
IT
79.19.185.251
10/10
Confidence
94%
Reports
35
Location
IT
IT
95.250.241.71
10/10
Confidence
93%
Reports
10
Location
IT
IT
95.240.192.149
8/10
Confidence
87%
Reports
67
Location
IT
IT
79.6.181.193
10/10
Confidence
87%
Reports
8
Location
IT
IT
188.15.251.43
8/10
Confidence
77%
Reports
11
Location
IT
IT
79.6.181.195
10/10
Confidence
75%
Reports
62
Location
IT
IT
79.36.240.89
10/10
Confidence
74%
Reports
11
Location
IT
IT
95.235.240.74
8/10
Confidence
71%
Reports
25
Location
IT
IT
85.47.236.93
10/10
Confidence
68%
Reports
134
Location
IT
IT
95.244.167.178
10/10
Confidence
64%
Reports
57
Location
IT
IT
87.27.155.236
8/10
Confidence
60%
Reports
10
Location
IT
IT
94.81.161.194
10/10
Confidence
59%
Reports
44
Location
IT
IT
194.243.156.222
10/10
Confidence
59%
Reports
36
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
79.36.191.212
8/10
Confidence
97%
Reports
24
ISP
TIM
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
70%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.26
8/10
Confidence
70%
Reports
17,657
Location
US
US
45.82.78.103
10/10
Confidence
70%
Reports
3,928
Location
DE
DE
93.157.248.178
10/10
Confidence
70%
Reports
2,846
Location
RU
RU
208.3.195.65
8/10
Confidence
70%
Reports
1,337
Location
US
US
111.61.229.78
10/10
Confidence
70%
Reports
1,065
Location
CN
CN
118.193.68.150
10/10
Confidence
70%
Reports
942
Location
KR
KR
162.216.150.133
10/10
Confidence
70%
Reports
834
Location
US
US
35.203.211.233
10/10
Confidence
70%
Reports
791
Location
GB
GB
103.226.138.52
10/10
Confidence
70%
Reports
705
Location
ID
ID
94.74.182.167
10/10
Confidence
70%
Reports
688
Location
US
US
169.150.203.62
10/10
Confidence
70%
Reports
663
Location
US
US
147.185.133.125
10/10
Confidence
70%
Reports
635
Location
US
US
101.36.116.45
10/10
Confidence
70%
Reports
541
Location
HK
HK
35.203.210.113
10/10
Confidence
70%
Reports
525
Location
GB
GB
49.115.217.27
10/10
Confidence
70%
Reports
509
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203