Extreme Threat
IP 109.206.241.199 classified at threat level 10/10 with 86 documented attacks.
Advanced threat indicators confirmed with 89% certainty.
More threatening than 96% of monitored IPs
IP Address
109.206.241.199
IPv4
Public
EE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
EE
Location
Baykov Ilya Sergeevich
ASN 41745
86
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
14. May 2026
Last Activity
7. June 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 41745) with generally good reputation. The ISP Baykov Ilya Sergeevich maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
89%
Verified
Confidence History
6. Apr 2026 - 7. Jun 2026
89%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 109.206.241.199
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
EE
- ASN
- AS41745
- ISP
- Baykov Ilya Sergeevich
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 86
- First Reported
- 19 Feb 2026
- Last Reported
- 7 Jun 2026, 20:05
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS41745
Baykov Ilya Sergeevich
RU
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
32
Total IPs Monitored
2,115
Total Reports
66.1
Reports per IP
Network Context
This IP address belongs to Baykov Ilya Sergeevich (AS41745), which manages 32 IP addresses in our monitoring system. Out of these, 2,115 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,621 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
86
avg: 23
++
Network Comparison
Compared against 55 IPs in ASN 41745
Threat Level
10/10
network avg: 6.3
++
Total Reports
86
network avg: 42
++
Network Baykov Ilya Sergeevich has overall threat level 2/10
Geographic Comparison
Compared against 51 IPs in EE
Threat Level
10/10
country avg: 6.1
++
Total Reports
86
country avg: 26
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
86
Hacking
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5%
-
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
85%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
45.144.233.56
10/10
Confidence
99%
Reports
99
Location
DE
DE
138.124.73.129
10/10
Confidence
99%
Reports
16
Location
DE
DE
166.1.60.230
10/10
Confidence
98%
Reports
27
Location
US
US
185.113.139.51
10/10
Confidence
95%
Reports
129
Location
LV
LV
45.144.233.139
10/10
Confidence
94%
Reports
112
Location
DE
DE
104.164.62.7
10/10
Confidence
94%
Reports
14
Location
FI
FI
138.124.71.25
8/10
Confidence
93%
Reports
14
Location
SE
SE
138.124.20.112
10/10
Confidence
92%
Reports
66
Location
PL
PL
194.190.153.226
10/10
Confidence
91%
Reports
84
Location
RU
RU
83.171.226.124
10/10
Confidence
89%
Reports
8
Location
RU
RU
95.215.8.165
10/10
Confidence
84%
Reports
7
Location
NL
NL
138.124.15.176
8/10
Confidence
79%
Reports
11
Location
FI
FI
138.124.85.214
10/10
Confidence
78%
Reports
5
Location
CH
CH
45.89.63.39
10/10
Confidence
76%
Reports
35
Location
GB
GB
185.68.184.66
10/10
Confidence
74%
Reports
28
Location
DE
DE
138.124.16.222
10/10
Confidence
74%
Reports
9
Location
NL
NL
138.124.31.169
10/10
Confidence
74%
Reports
9
Location
FR
FR
5.39.250.38
8/10
Confidence
72%
Reports
34
Location
LV
LV
194.147.34.192
8/10
Confidence
71%
Reports
35
Location
PL
PL
192.145.30.139
10/10
Confidence
68%
Reports
71
Location
BG
BG
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
70%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
64.188.78.34
8/10
Confidence
97%
Reports
21
ISP
Oc Networks Lim...
213.35.128.24
8/10
Confidence
87%
Reports
17
ISP
Telia Eesti AS
109.172.8.83
10/10
Confidence
84%
Reports
207
ISP
SmartApe OU
185.73.124.28
10/10
Confidence
78%
Reports
400
ISP
Soldatov Alexey...
69.12.83.27
10/10
Confidence
75%
Reports
70
ISP
HostSlim B.V.
69.12.83.39
10/10
Confidence
75%
Reports
58
ISP
HostSlim B.V.
69.12.83.46
8/10
Confidence
72%
Reports
56
ISP
HostSlim B.V.
84.50.142.247
8/10
Confidence
72%
Reports
43
ISP
Telia Eesti AS
194.127.167.70
10/10
Confidence
67%
Reports
12
ISP
Owl Limited
185.170.144.3
10/10
Confidence
64%
Reports
93
ISP
Xhost Internet ...
46.22.210.99
10/10
Confidence
62%
Reports
162
ISP
Aktsiaselts Wav...
95.85.245.10
8/10
Confidence
58%
Reports
14
ISP
Oc Networks Lim...
109.94.209.94
0/10
Confidence
56%
Reports
4
ISP
Arvid Logicum OU
85.29.246.199
7/10
Confidence
49%
Reports
4
ISP
Telia Eesti AS
69.12.83.203
10/10
Confidence
47%
Reports
5
ISP
HostSlim B.V.
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
152.32.170.55
10/10
Confidence
89%
Reports
2,147
Location
HK
HK
165.227.188.42
8/10
Confidence
89%
Reports
1,539
Location
US
US
165.227.110.45
8/10
Confidence
89%
Reports
1,515
Location
US
US
137.184.112.103
8/10
Confidence
89%
Reports
1,469
Location
US
US
92.63.197.77
8/10
Confidence
89%
Reports
635
Location
UA
UA
45.153.34.32
10/10
Confidence
89%
Reports
622
Location
NL
NL
45.91.64.6
8/10
Confidence
89%
Reports
554
Location
RU
RU
206.189.106.82
8/10
Confidence
89%
Reports
477
Location
NL
NL
184.105.247.252
10/10
Confidence
89%
Reports
438
Location
US
US
64.62.197.152
8/10
Confidence
89%
Reports
420
Location
US
US
65.49.1.212
10/10
Confidence
89%
Reports
365
Location
US
US
185.50.38.135
10/10
Confidence
89%
Reports
267
Location
IR
IR
165.227.18.206
10/10
Confidence
89%
Reports
227
Location
US
US
176.65.149.45
10/10
Confidence
89%
Reports
224
Location
NL
NL
36.111.150.151
10/10
Confidence
89%
Reports
221
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203