Substantial Risk
Threat level 8/10 for 109.194.108.203 based on 21 documented incidents.
Consistent suspicious behavior patterns. 88% confidence rating.
More threatening than 90% of monitored IPs
IP Address
109.194.108.203
IPv4
Public
RU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Russia
Location
JSC ER-Telecom Holding
ASN 41786
21
Reports
Mixed
Data Source
Threat Categories
SSH
21
Brute-Force
6
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
14. September 2026
Last Activity
3. October 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 41786) with generally good reputation. The ISP JSC ER-Telecom Holding maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
88%
Verified
Confidence History
16. May 2026 - 3. Oct 2026
88%
Current
Stable
Trend
Security Reports (21)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 109.194.108.203
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
RU
- ASN
- AS41786
- ISP
- JSC ER-Telecom Holding
DNS Information
- Reverse DNS
- staticip-109x194x108x203.pppoe.yola.ertelecom.ru
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 21
- First Reported
- 16 May 2026
- Last Reported
- 3 Oct 2026, 02:40
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 833,479 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
21
avg: 9
++
Network Comparison
Compared against 6 IPs in ASN 41786
Threat Level
8/10
network avg: 5.7
+
Total Reports
21
network avg: 5
++
Geographic Comparison
Compared against 13,672 IPs in RU
Threat Level
8/10
country avg: 6.5
+
Total Reports
21
country avg: 9
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Monday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
21
Brute-Force
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
757,710 threat incidents tracked globally • Last 24h: 31,056 Logs
FEED
Top Threat Sources
-
01
United States148,319 19.6% -
02
Brazil111,890 14.8%
-
03
India87,218 11.5%
-
04
China46,098 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,454 2.4%
-
07
Netherlands18,023 2.4%
-
08
Pakistan17,827 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,172 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
5.2/10
Avg Threat
10%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
89.108.74.178
10/10
Confidence
100%
Reports
63
ISP
Domain names re...
91.188.185.101
10/10
Confidence
100%
Reports
28
ISP
Digit One LLC
188.235.18.124
10/10
Confidence
100%
Reports
25
ISP
JSC ER-Telecom ...
82.208.125.106
10/10
Confidence
100%
Reports
16
ISP
Rostelecom
104.28.212.74
8/10
Confidence
100%
Reports
16
ISP
Cloudflare, Inc.
188.43.28.193
10/10
Confidence
100%
Reports
15
ISP
Joint Stock Com...
77.94.99.50
8/10
Confidence
100%
Reports
13
ISP
PJSC Bashinform...
188.0.18.116
8/10
Confidence
100%
Reports
12
ISP
YarTV Ltd.
94.180.139.162
8/10
Confidence
100%
Reports
11
ISP
JSC ER-Telecom ...
80.251.156.20
8/10
Confidence
99%
Reports
18
ISP
MTS PJSC
194.226.49.237
10/10
Confidence
98%
Reports
16
ISP
Ztv Corp LLC
89.169.177.53
10/10
Confidence
98%
Reports
14
ISP
Yandex.Cloud LLC
104.28.161.42
8/10
Confidence
98%
Reports
13
ISP
Cloudflare, Inc.
95.174.127.178
8/10
Confidence
98%
Reports
12
ISP
Consumer Intern...
5.165.19.3
10/10
Confidence
98%
Reports
11
ISP
JSC ER-Telecom ...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.236.156.173
10/10
Confidence
88%
Reports
11
Location
TW
TW
177.2.185.172
10/10
Confidence
88%
Reports
10
Location
JP
JP
179.111.150.75
10/10
Confidence
88%
Reports
18
Location
BR
BR
218.94.4.146
10/10
Confidence
88%
Reports
11
Location
CN
CN
34.104.229.133
10/10
Confidence
88%
Reports
8
Location
JP
JP
57.131.148.81
10/10
Confidence
88%
Reports
9
Location
FR
FR
156.197.220.240
10/10
Confidence
88%
Reports
10
Location
EG
EG
47.195.67.75
10/10
Confidence
88%
Reports
13
Location
US
US
4.213.17.235
10/10
Confidence
88%
Reports
10
Location
IN
IN
103.172.166.85
10/10
Confidence
88%
Reports
11
Location
PK
PK
124.105.255.132
10/10
Confidence
88%
Reports
8
Location
PH
PH
136.67.92.106
10/10
Confidence
88%
Reports
13
Location
US
US
45.138.12.43
10/10
Confidence
88%
Reports
11
Location
LT
LT
177.227.198.163
10/10
Confidence
88%
Reports
26
Location
MX
MX
187.149.52.229
10/10
Confidence
88%
Reports
266
Location
MX
MX