Extreme Threat
IP 180.109.94.149 classified at threat level 10/10 with 29 documented attacks.
Advanced threat indicators confirmed with 79% certainty.
More threatening than 94% of monitored IPs
IP Address
180.109.94.149
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
Chinanet
ASN 4134
29
Reports
Honeypot
Data Source
Threat Categories
SSH
24
Hacking
5
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 4134) with generally good reputation. The ISP Chinanet maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
73%
High Confidence
Confidence History
24. Feb 2026 - 25. Mar 2026
79%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 180.109.94.149
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
CN
- ASN
- AS4134
- ISP
- Chinanet
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 24 Feb 2026
- Last Reported
- 25 Mar 2026, 06:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4134
Chinanet
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
8,261
Total IPs Monitored
33,059
Total Reports
4
Reports per IP
Network Context
This IP address belongs to Chinanet (AS4134), which manages 8,261 IP addresses in our monitoring system. Out of these, 33,059 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,728 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
29
avg: 23
+
Network Comparison
Compared against 8,954 IPs in ASN 4134
Threat Level
10/10
network avg: 3.1
++
Total Reports
29
network avg: 4
++
Network Chinanet has overall threat level 3/10
Geographic Comparison
Compared against 26,029 IPs in CN
Threat Level
10/10
country avg: 3.7
++
Total Reports
29
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
13 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
24
Hacking
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9%
-
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.8/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
110.191.179.174
10/10
Confidence
100%
Reports
103
Location
CN
CN
110.82.42.202
10/10
Confidence
100%
Reports
102
Location
CN
CN
218.17.239.204
10/10
Confidence
100%
Reports
67
Location
CN
CN
220.180.76.50
10/10
Confidence
100%
Reports
65
Location
CN
CN
27.18.114.8
10/10
Confidence
100%
Reports
61
Location
CN
CN
218.92.102.178
10/10
Confidence
100%
Reports
59
Location
CN
CN
14.29.214.161
10/10
Confidence
100%
Reports
42
Location
CN
CN
60.183.142.51
10/10
Confidence
100%
Reports
16
Location
CN
CN
49.77.24.228
10/10
Confidence
100%
Reports
16
Location
CN
CN
58.222.86.210
8/10
Confidence
100%
Reports
16
Location
CN
CN
183.63.218.104
10/10
Confidence
99%
Reports
85
Location
CN
CN
219.150.17.250
10/10
Confidence
99%
Reports
52
Location
CN
CN
113.222.189.88
8/10
Confidence
99%
Reports
31
Location
CN
CN
222.247.32.186
10/10
Confidence
99%
Reports
15
Location
CN
CN
61.128.178.119
10/10
Confidence
98%
Reports
68
Location
CN
CN
218.90.157.62
10/10
Confidence
98%
Reports
60
Location
CN
CN
218.75.108.154
10/10
Confidence
98%
Reports
37
Location
CN
CN
180.109.94.132
10/10
Confidence
98%
Reports
26
Location
CN
CN
183.47.48.90
10/10
Confidence
98%
Reports
25
Location
CN
CN
171.217.24.132
10/10
Confidence
98%
Reports
24
Location
CN
CN
IPs from the same subnet range, likely same network segment.
2
Related IPs
9/10
Avg Threat
77%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.157.77.71
10/10
Confidence
100%
Reports
113
ISP
China Mobile Co...
112.11.230.160
10/10
Confidence
100%
Reports
104
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.82.42.202
10/10
Confidence
100%
Reports
102
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
77
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
76
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
67
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
65
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
218.92.102.178
10/10
Confidence
100%
Reports
59
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
46
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
43
ISP
China Telecom G...
14.29.214.161
10/10
Confidence
100%
Reports
42
ISP
Chinanet
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
79%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
137.184.190.194
8/10
Confidence
79%
Reports
2,872
Location
US
US
137.184.190.205
8/10
Confidence
79%
Reports
2,783
Location
US
US
50.212.116.145
10/10
Confidence
79%
Reports
1,598
Location
US
US
159.65.151.71
10/10
Confidence
79%
Reports
1,107
Location
IN
IN
104.194.158.80
10/10
Confidence
79%
Reports
927
Location
DE
DE
79.141.172.211
10/10
Confidence
79%
Reports
861
Location
US
US
5.78.58.246
10/10
Confidence
79%
Reports
846
Location
US
US
144.172.106.223
10/10
Confidence
79%
Reports
844
Location
US
US
64.62.156.80
8/10
Confidence
79%
Reports
835
Location
US
US
206.123.145.56
10/10
Confidence
79%
Reports
785
Location
US
US
206.123.145.78
10/10
Confidence
79%
Reports
785
Location
US
US
206.123.145.57
10/10
Confidence
79%
Reports
784
Location
US
US
206.123.145.46
10/10
Confidence
79%
Reports
784
Location
US
US
206.123.145.76
10/10
Confidence
79%
Reports
784
Location
US
US
206.123.145.54
10/10
Confidence
79%
Reports
783
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203