Substantial Risk
Threat level 8/10 for 185.125.27.44 based on 19 documented incidents.
Consistent suspicious behavior patterns. 100% confidence rating.
More threatening than 85% of monitored IPs
IP Address
185.125.27.44
IPv4
Public
CH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Switzerland
Location
Infomaniak Network SA
ASN 29222
19
Reports
Mixed
Data Source
Threat Categories
Hacking
13
Brute-Force
9
WP Login Brute Force
9
Port Scan
4
WP XML-RPC Brute Force
4
DDoS Attack
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 29222, operated by Infomaniak Network SA) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
86%
Verified
Confidence History
13. Jun 2026 - 21. Jun 2026
100%
Current
Stable
Trend
Security Reports (19)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Brute-Force WP Login Brute Force | Honeypot x14 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x13 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Plugin Exploit +1 | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| WP Version Scanning WP Plugin Scanning | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 185.125.27.44
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
CH
- ASN
- AS29222
- ISP
- Infomaniak Network SA
DNS Information
- Reverse DNS
- h2web420.infomaniak.ch
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 19
- First Reported
- 13 Jun 2026
- Last Reported
- 21 Jun 2026, 11:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS29222
Infomaniak Network SA
CH
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
8
Total IPs Monitored
161
Total Reports
20.1
Reports per IP
Network Context
This IP address belongs to Infomaniak Network SA (AS29222), which manages 8 IP addresses in our monitoring system. Out of these, 161 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 291,679 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
19
avg: 18
=
Network Comparison
Compared against 19 IPs in ASN 29222
Threat Level
8/10
network avg: 5.7
+
Total Reports
19
network avg: 12
++
Network Infomaniak Network SA has overall threat level 5/10
Geographic Comparison
Compared against 605 IPs in CH
Threat Level
8/10
country avg: 6.1
+
Total Reports
19
country avg: 34
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
13
Brute-Force
9
WP Login Brute Force
9
Port Scan
4
WP XML-RPC Brute Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 16:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
273,690 threat incidents tracked globally • Last 24h: 16,896 Logs
FEED
Top Threat Sources
-
01
United States61,567 22.5% -
02
India45,293 16.5% -
03
China34,061 12.4% -
04
Brazil14,655 5.4% -
05
Germany9,822 3.6% -
06
Singapore7,937 2.9% -
07
Indonesia7,837 2.9% -
08
Pakistan7,768 2.8% -
09
Russia6,148 2.2% -
10
Netherlands5,892 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
5.6/10
Avg Threat
42%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
195.15.227.114
10/10
Confidence
100%
Reports
35
Location
CH
CH
185.125.27.34
8/10
Confidence
84%
Reports
68
Location
CH
CH
2001:1600:16:10::1ea
8/10
Confidence
66%
Reports
36
Location
CH
CH
83.228.227.204
8/10
Confidence
66%
Reports
36
Location
CH
CH
37.156.44.25
8/10
Confidence
56%
Reports
6
Location
CH
CH
37.156.47.230
0/10
Confidence
47%
Reports
3
Location
CH
CH
195.15.210.11
7/10
Confidence
40%
Reports
2
Location
CH
CH
83.228.230.102
0/10
Confidence
38%
Reports
2
Location
CH
CH
185.125.27.167
6/10
Confidence
35%
Reports
2
Location
CH
CH
185.143.102.209
7/10
Confidence
30%
Reports
1
Location
CH
CH
83.228.250.117
7/10
Confidence
30%
Reports
1
Location
CH
CH
185.143.102.178
0/10
Confidence
29%
Reports
1
Location
CH
CH
185.74.71.44
6/10
Confidence
26%
Reports
2
Location
CH
CH
2001:1600:4:11::507
0/10
Confidence
23%
Reports
3
Location
CH
CH
2001:1600:4:b:1618:77ff:fe41:dd0d
6/10
Confidence
22%
Reports
1
Location
CH
CH
128.65.195.87
6/10
Confidence
22%
Reports
1
Location
CH
CH
2001:1600:0:aaaa::80:19
7/10
Confidence
20%
Reports
5
Location
CH
CH
2001:1600:4:13:2eea:7fff:fee7:bacc
7/10
Confidence
20%
Reports
5
Location
CH
CH
IPs from the same subnet range, likely same network segment.
2
Related IPs
7/10
Avg Threat
60%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.15.227.114
10/10
Confidence
100%
Reports
35
ISP
Infomaniak Netw...
45.92.108.143
8/10
Confidence
100%
Reports
15
ISP
Hosteur SAS
209.99.185.195
10/10
Confidence
98%
Reports
27
ISP
SKN Subnet & Te...
81.62.135.233
10/10
Confidence
98%
Reports
13
ISP
Bluewin
138.124.85.214
10/10
Confidence
98%
Reports
12
ISP
Baykov Ilya Ser...
185.196.11.208
8/10
Confidence
97%
Reports
48
ISP
Global-Data Sys...
185.196.11.160
8/10
Confidence
97%
Reports
18
ISP
Global-Data Sys...
81.17.28.130
10/10
Confidence
96%
Reports
25
ISP
Private Layer INC
185.191.239.39
10/10
Confidence
94%
Reports
725
ISP
GRUPO PANAGLOBA...
179.43.186.223
10/10
Confidence
94%
Reports
525
ISP
Private Layer INC
178.83.200.2
10/10
Confidence
94%
Reports
410
ISP
Private Customer
178.83.200.3
8/10
Confidence
94%
Reports
173
ISP
Private Customer
81.17.28.68
10/10
Confidence
94%
Reports
48
ISP
Private Layer INC
92.39.60.52
10/10
Confidence
94%
Reports
35
ISP
Akenes SA
35.216.254.237
10/10
Confidence
94%
Reports
26
ISP
GOOGLE
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
78.142.18.172
8/10
Confidence
100%
Reports
1,729
Location
BG
BG
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
143.244.57.84
8/10
Confidence
100%
Reports
677
Location
FR
FR
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
597
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
162.254.36.150
8/10
Confidence
100%
Reports
545
Location
US
US
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
213.171.208.62
8/10
Confidence
100%
Reports
517
Location
GB
GB
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
45.148.10.67
8/10
Confidence
100%
Reports
439
Location
NL
NL
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13