High Risk
IP 212.42.58.120 rated at threat level 8/10 based on 13 security reports.
Pattern analysis reveals concerning activity. Confidence: 11%.
More threatening than 74% of monitored IPs
IP Address
212.42.58.120
IPv4
Public
RU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
RU
Location
Tehno-Pro LLC
ASN 48199
13
Reports
Community
Data Source
Threat Categories
Hacking
9
WP XML-RPC Brute Force
9
Brute-Force
6
WP Login Brute Force
5
DDoS Attack
1
WP Cron Abuse
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 48199, operated by Tehno-Pro LLC) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
8%
Low Confidence
Confidence History
24. Jan 2026 - 28. Feb 2026
11%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force WP XML-RPC Brute Force Hacking | Community x2 | 75% | |
| WP Cron Abuse DDoS Attack Brute-Force +1 | Community x3 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking WP Login Brute Force +1 | Community x2 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community x2 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 212.42.58.120
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
RU
- ASN
- AS48199
- ISP
- Tehno-Pro LLC
DNS Information
- Reverse DNS
- 212.42.58.120.teerex.ru
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 13
- First Reported
- 24 Jan 2026
- Last Reported
- 1 Mar 2026, 03:46
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS48199
Tehno-Pro LLC
RU
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
2
Total IPs Monitored
32
Total Reports
16
Reports per IP
Network Context
This IP address belongs to Tehno-Pro LLC (AS48199), which manages 2 IP addresses in our monitoring system. Out of these, 32 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
74
%
Global Threat Ranking
This IP is more threatening than 74% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,765 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
13
avg: 23
-
Network Comparison
Compared against 2 IPs in ASN 48199
Threat Level
8/10
network avg: 9.0
=
Total Reports
13
network avg: 10
+
Network Tehno-Pro LLC has overall threat level 5/10
Geographic Comparison
Compared against 4,707 IPs in RU
Threat Level
8/10
country avg: 5.3
++
Total Reports
13
country avg: 17
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP XML-RPC Brute Force
9
Hacking
9
Brute-Force
6
WP Login Brute Force
5
WP Cron Abuse
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5%
-
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
10/10
Avg Threat
42%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
5.35.7.175
8/10
Confidence
99%
Reports
82
ISP
JSC Selectel
46.165.56.242
8/10
Confidence
99%
Reports
53
ISP
Nizhnetagilskie...
85.95.166.40
10/10
Confidence
99%
Reports
36
ISP
Rostelecom
176.211.42.202
10/10
Confidence
99%
Reports
31
ISP
Rostelecom
188.92.241.150
10/10
Confidence
99%
Reports
24
ISP
JSC Avantel
213.167.43.130
10/10
Confidence
99%
Reports
23
ISP
Digit One LLC
81.28.167.30
10/10
Confidence
98%
Reports
12
ISP
Rostelecom
91.205.128.170
8/10
Confidence
97%
Reports
98
ISP
LTD Erline
91.237.163.110
8/10
Confidence
97%
Reports
65
ISP
Systematica LLC
212.33.247.195
8/10
Confidence
97%
Reports
45
ISP
JSC ER-Telecom ...
37.139.53.129
8/10
Confidence
97%
Reports
40
ISP
Petersburg Inte...
94.180.238.116
8/10
Confidence
97%
Reports
39
ISP
JSC ER-Telecom ...
37.230.245.194
8/10
Confidence
97%
Reports
34
ISP
PJSC MegaFon
91.151.178.74
8/10
Confidence
97%
Reports
29
ISP
Petersburg Inte...
103.136.43.74
8/10
Confidence
97%
Reports
28
ISP
Ip Server LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
11%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
109.70.100.5
7/10
Confidence
11%
Reports
57
Location
AT
AT
95.85.238.20
7/10
Confidence
11%
Reports
53
Location
CZ
CZ
46.224.215.94
8/10
Confidence
11%
Reports
51
Location
DE
DE
185.220.101.10
7/10
Confidence
11%
Reports
43
Location
DE
DE
87.120.126.236
7/10
Confidence
11%
Reports
32
Location
DE
DE
83.217.208.173
7/10
Confidence
11%
Reports
30
Location
RU
RU
192.0.86.182
8/10
Confidence
11%
Reports
24
Location
US
US
185.220.101.22
7/10
Confidence
11%
Reports
24
Location
DE
DE
45.13.225.78
7/10
Confidence
11%
Reports
18
Location
DE
DE
171.25.193.35
7/10
Confidence
11%
Reports
18
Location
SE
SE
220.158.232.245
7/10
Confidence
11%
Reports
15
Location
KH
KH
217.154.180.55
8/10
Confidence
11%
Reports
13
Location
ES
ES
160.187.210.194
8/10
Confidence
11%
Reports
12
Location
MY
MY
217.154.36.120
7/10
Confidence
11%
Reports
12
Location
GB
GB
87.106.44.42
7/10
Confidence
11%
Reports
12
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203