Extreme Threat
IP 94.180.131.125 classified at threat level 10/10 with 10 documented attacks.
Advanced threat indicators confirmed with 70% certainty.
More threatening than 91% of monitored IPs
IP Address
94.180.131.125
IPv4
Public
RU
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Top 10% High Threat
RU
Location
JSC ER-Telecom Holding
ASN 41668
10
Reports
Honeypot
Data Source
Threat Categories
Hacking
10
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 5 days indicates persistent threat actor operations.
First Observed
7. May 2026
Last Activity
12. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 41668) with generally good reputation. The ISP JSC ER-Telecom Holding maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
68%
High Confidence
Confidence History
1. Mar 2026 - 12. May 2026
70%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot x4 | 75% |
Technical Details
Basic Information
- IP Address
- 94.180.131.125
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
RU
- ASN
- AS41668
- ISP
- JSC ER-Telecom Holding
DNS Information
- Reverse DNS
- 94x180x131x125.dynamic.kzn.ertelecom.ru
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 10
- First Reported
- 1 Mar 2026
- Last Reported
- 12 May 2026, 14:24
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS41668
JSC ER-Telecom Holding
RU
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5
Total IPs Monitored
107
Total Reports
21.4
Reports per IP
Network Context
This IP address belongs to JSC ER-Telecom Holding (AS41668), which manages 5 IP addresses in our monitoring system. Out of these, 107 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 153,270 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
10
avg: 28
--
Network Comparison
Compared against 9 IPs in ASN 41668
Threat Level
10/10
network avg: 6.9
+
Total Reports
10
network avg: 15
-
Network JSC ER-Telecom Holding has overall threat level 2/10
Geographic Comparison
Compared against 3,699 IPs in RU
Threat Level
10/10
country avg: 4.8
++
Total Reports
10
country avg: 21
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
7 May 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Saturday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
10
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
144,715 threat incidents tracked globally • Last 24h: 19,701 Logs
FEED
Top Threat Sources
-
01
United States32,752 22.6% -
02
China23,455 16.2% -
03
India15,421 10.7% -
04
Brazil7,012 4.8% -
05
Germany6,132 4.2% -
06
Singapore5,761 4% -
07
Indonesia4,009 2.8% -
08
Netherlands3,750 2.6% -
09
Russia3,697 2.6%
-
10
United Kingdom3,672 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
8
Related IPs
6.5/10
Avg Threat
54%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
94.180.238.116
8/10
Confidence
97%
Reports
39
Location
RU
RU
94.180.250.11
8/10
Confidence
74%
Reports
49
Location
RU
RU
94.180.223.124
8/10
Confidence
70%
Reports
14
Location
RU
RU
94.180.229.67
8/10
Confidence
68%
Reports
14
Location
RU
RU
94.180.217.46
7/10
Confidence
37%
Reports
2
Location
RU
RU
92.255.196.185
7/10
Confidence
36%
Reports
3
Location
RU
RU
94.180.224.6
0/10
Confidence
29%
Reports
1
Location
RU
RU
94.180.243.12
6/10
Confidence
23%
Reports
1
Location
RU
RU
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
5.35.7.175
8/10
Confidence
99%
Reports
82
ISP
JSC Selectel
79.104.0.82
10/10
Confidence
99%
Reports
77
ISP
PVimpelCom
85.95.166.40
10/10
Confidence
99%
Reports
26
ISP
Rostelecom
213.167.43.130
10/10
Confidence
99%
Reports
23
ISP
Digit One LLC
195.208.188.153
8/10
Confidence
99%
Reports
20
ISP
Progress Techno...
185.40.30.168
10/10
Confidence
97%
Reports
118
ISP
Start2 LLC
91.205.128.170
8/10
Confidence
97%
Reports
98
ISP
LTD Erline
91.237.163.110
8/10
Confidence
97%
Reports
65
ISP
Systematica LLC
212.33.247.195
8/10
Confidence
97%
Reports
45
ISP
JSC ER-Telecom ...
46.165.56.242
10/10
Confidence
97%
Reports
43
ISP
Nizhnetagilskie...
94.180.238.116
8/10
Confidence
97%
Reports
39
ISP
JSC ER-Telecom ...
37.139.53.129
8/10
Confidence
97%
Reports
38
ISP
Petersburg Inte...
37.230.245.194
8/10
Confidence
97%
Reports
34
ISP
PJSC MegaFon
91.151.178.74
8/10
Confidence
97%
Reports
29
ISP
Petersburg Inte...
103.136.43.74
8/10
Confidence
97%
Reports
28
ISP
Ip Server LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
70%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.82.78.103
10/10
Confidence
70%
Reports
3,871
Location
DE
DE
93.157.248.178
10/10
Confidence
70%
Reports
2,846
Location
RU
RU
208.3.195.65
8/10
Confidence
70%
Reports
1,337
Location
US
US
111.61.229.78
10/10
Confidence
70%
Reports
1,057
Location
CN
CN
118.193.68.150
10/10
Confidence
70%
Reports
939
Location
KR
KR
152.32.191.98
10/10
Confidence
70%
Reports
828
Location
HK
HK
162.216.150.133
10/10
Confidence
70%
Reports
825
Location
US
US
35.203.211.233
10/10
Confidence
70%
Reports
784
Location
GB
GB
94.74.182.167
10/10
Confidence
70%
Reports
688
Location
US
US
169.150.203.62
10/10
Confidence
70%
Reports
663
Location
US
US
147.185.133.233
10/10
Confidence
70%
Reports
636
Location
US
US
147.185.133.125
10/10
Confidence
70%
Reports
627
Location
US
US
4.145.113.4
10/10
Confidence
70%
Reports
581
Location
SG
SG
45.79.181.104
8/10
Confidence
70%
Reports
567
Location
US
US
101.36.116.45
10/10
Confidence
70%
Reports
536
Location
HK
HK