Extreme Threat
IP 138.124.85.214 classified at threat level 10/10 with 5 documented attacks.
Advanced threat indicators confirmed with 78% certainty.
More threatening than 94% of monitored IPs
IP Address
138.124.85.214
IPv4
Public
CH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Switzerland
Location
Baykov Ilya Sergeevich
ASN 41745
5
Reports
Honeypot
Data Source
Threat Categories
SSH
5
Hacking
4
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
24. May 2026
Last Activity
25. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 41745) with generally good reputation. The ISP Baykov Ilya Sergeevich maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
68%
High Confidence
Confidence History
24. May 2026 - 25. May 2026
78%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 138.124.85.214
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
CH
- ASN
- AS41745
- ISP
- Baykov Ilya Sergeevich
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 24 May 2026
- Last Reported
- 25 May 2026, 21:23
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS41745
Baykov Ilya Sergeevich
RU
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
32
Total IPs Monitored
2,115
Total Reports
66.1
Reports per IP
Network Context
This IP address belongs to Baykov Ilya Sergeevich (AS41745), which manages 32 IP addresses in our monitoring system. Out of these, 2,115 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,837 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
5
avg: 23
--
Network Comparison
Compared against 55 IPs in ASN 41745
Threat Level
10/10
network avg: 6.3
++
Total Reports
5
network avg: 42
--
Network Baykov Ilya Sergeevich has overall threat level 2/10
Geographic Comparison
Compared against 396 IPs in CH
Threat Level
10/10
country avg: 5.5
++
Total Reports
5
country avg: 45
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
24 May 2026
4 reports
Daily Average
0.2
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
5
Hacking
4
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,519 threat incidents tracked globally • Last 24h: 18,988 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,036 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5%
-
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
85%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
45.144.233.56
10/10
Confidence
99%
Reports
99
Location
DE
DE
138.124.73.129
10/10
Confidence
99%
Reports
16
Location
DE
DE
166.1.60.230
10/10
Confidence
98%
Reports
27
Location
US
US
185.113.139.51
10/10
Confidence
95%
Reports
129
Location
LV
LV
45.144.233.139
10/10
Confidence
94%
Reports
112
Location
DE
DE
104.164.62.7
10/10
Confidence
94%
Reports
14
Location
FI
FI
138.124.71.25
8/10
Confidence
93%
Reports
14
Location
SE
SE
138.124.20.112
10/10
Confidence
92%
Reports
66
Location
PL
PL
194.190.153.226
10/10
Confidence
91%
Reports
84
Location
RU
RU
109.206.241.199
10/10
Confidence
89%
Reports
87
Location
EE
EE
83.171.226.124
10/10
Confidence
89%
Reports
8
Location
RU
RU
95.215.8.165
10/10
Confidence
84%
Reports
7
Location
NL
NL
138.124.15.176
8/10
Confidence
79%
Reports
11
Location
FI
FI
45.89.63.39
10/10
Confidence
76%
Reports
35
Location
GB
GB
185.68.184.66
10/10
Confidence
74%
Reports
28
Location
DE
DE
138.124.16.222
10/10
Confidence
74%
Reports
9
Location
NL
NL
138.124.31.169
10/10
Confidence
74%
Reports
9
Location
FR
FR
5.39.250.38
8/10
Confidence
72%
Reports
34
Location
LV
LV
194.147.34.192
8/10
Confidence
71%
Reports
35
Location
PL
PL
192.145.30.139
10/10
Confidence
68%
Reports
71
Location
BG
BG
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
209.99.185.195
10/10
Confidence
98%
Reports
14
ISP
SKN Subnet & Te...
185.196.11.208
8/10
Confidence
97%
Reports
48
ISP
Global-Data Sys...
104.244.79.40
8/10
Confidence
97%
Reports
30
ISP
FranTech Solutions
185.196.11.160
8/10
Confidence
97%
Reports
18
ISP
Global-Data Sys...
179.43.139.58
10/10
Confidence
94%
Reports
2,295
ISP
Private Layer INC
185.191.239.39
10/10
Confidence
94%
Reports
725
ISP
GRUPO PANAGLOBA...
179.43.186.223
10/10
Confidence
94%
Reports
525
ISP
Private Layer INC
178.83.200.2
10/10
Confidence
94%
Reports
410
ISP
Private Customer
179.43.134.114
10/10
Confidence
94%
Reports
229
ISP
Private Layer INC
178.83.200.3
8/10
Confidence
94%
Reports
173
ISP
Private Customer
186.190.215.90
10/10
Confidence
94%
Reports
24
ISP
GTHost
89.145.167.242
10/10
Confidence
94%
Reports
21
ISP
Akenes SA
35.216.254.237
10/10
Confidence
94%
Reports
18
ISP
GOOGLE
20.203.168.197
8/10
Confidence
93%
Reports
11
ISP
Microsoft Corpo...
37.120.213.13
10/10
Confidence
92%
Reports
36
ISP
M247 Europe SRL
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
78%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.5
8/10
Confidence
78%
Reports
18,188
Location
US
US
143.110.239.2
8/10
Confidence
78%
Reports
11,939
Location
US
US
64.225.74.178
8/10
Confidence
78%
Reports
9,572
Location
NL
NL
185.156.73.167
8/10
Confidence
78%
Reports
2,534
Location
UA
UA
80.94.92.67
10/10
Confidence
78%
Reports
1,569
Location
RO
RO
64.62.197.137
8/10
Confidence
78%
Reports
911
Location
US
US
95.215.0.144
8/10
Confidence
78%
Reports
832
Location
RU
RU
216.126.239.150
10/10
Confidence
78%
Reports
828
Location
US
US
78.153.140.147
10/10
Confidence
78%
Reports
819
Location
GB
GB
93.123.109.192
10/10
Confidence
78%
Reports
804
Location
BG
BG
5.188.154.78
10/10
Confidence
78%
Reports
695
Location
KZ
KZ
80.94.92.182
10/10
Confidence
78%
Reports
671
Location
RO
RO
34.58.124.191
10/10
Confidence
78%
Reports
644
Location
US
US
109.199.98.14
10/10
Confidence
78%
Reports
573
Location
FR
FR
178.214.77.7
10/10
Confidence
78%
Reports
536
Location
PS
PS
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203