Critical Alert
Security alert: 147.185.242.125 rated 10/10 based on 17 verified incidents.
Threat profile indicates sustained malicious activity with 21% confidence rating.
More threatening than 94% of monitored IPs
IP Address
147.185.242.125
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
United States
Location
Kamatera, Inc.
ASN 396948
17
Reports
Honeypot
Data Source
Threat Categories
SSH
13
Hacking
4
Exploited Host
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 396948) with generally good reputation. The ISP Kamatera, Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
16%
Low Confidence
Confidence History
25. Jul 2026 - 26. Jul 2026
21%
Current
Stable
Trend
Security Reports (17)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Exploited Host | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 147.185.242.125
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS396948
- ISP
- Kamatera, Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 17
- First Reported
- 25 Jul 2026
- Last Reported
- 26 Jul 2026, 21:07
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 834,037 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
17
avg: 9
++
Network Comparison
Compared against 30 IPs in ASN 396948
Threat Level
10/10
network avg: 4.9
++
Total Reports
17
network avg: 3
++
Geographic Comparison
Compared against 148,440 IPs in US
Threat Level
10/10
country avg: 6.8
+
Total Reports
17
country avg: 18
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
13
Exploited Host
4
Hacking
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
758,233 threat incidents tracked globally • Last 24h: 31,369 Logs
FEED
Top Threat Sources
-
01
United States148,440 19.6% -
02
Brazil111,910 14.8%
-
03
India87,350 11.5%
-
04
China46,134 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,467 2.4%
-
07
Netherlands18,034 2.4%
-
08
Pakistan17,848 2.4%
-
09
Argentina16,274 2.1%
-
10
Colombia15,173 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
4.6/10
Avg Threat
24%
Avg Confidence
1
High Threat
104.128.66.32
5/10
Confidence
33%
Reports
3
Location
US
US
199.244.51.180
5/10
Confidence
33%
Reports
3
Location
US
US
138.128.246.88
5/10
Confidence
29%
Reports
12
Location
US
US
103.98.213.153
5/10
Confidence
24%
Reports
3
Location
US
US
147.185.243.71
5/10
Confidence
24%
Reports
3
Location
US
US
78.138.24.63
4/10
Confidence
24%
Reports
2
Location
US
US
199.244.51.121
4/10
Confidence
24%
Reports
2
Location
US
US
147.185.243.210
4/10
Confidence
24%
Reports
2
Location
US
US
78.138.24.105
4/10
Confidence
23%
Reports
1
Location
US
US
138.128.246.13
4/10
Confidence
23%
Reports
1
Location
US
US
104.128.66.226
4/10
Confidence
23%
Reports
1
Location
US
US
104.128.67.83
4/10
Confidence
23%
Reports
1
Location
US
US
104.238.212.103
4/10
Confidence
23%
Reports
1
Location
US
US
147.185.242.67
4/10
Confidence
23%
Reports
1
Location
US
US
103.98.213.56
4/10
Confidence
23%
Reports
1
Location
US
US
43.231.232.171
4/10
Confidence
23%
Reports
1
Location
US
US
138.128.246.223
4/10
Confidence
23%
Reports
1
Location
US
US
138.128.246.243
4/10
Confidence
23%
Reports
1
Location
US
US
138.128.246.54
5/10
Confidence
20%
Reports
4
Location
US
US
78.138.24.128
10/10
Confidence
19%
Reports
8
Location
US
US
IPs from the same subnet range, likely same network segment.
1
Related IPs
4/10
Avg Threat
23%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
5/10
Avg Threat
21%
Avg Confidence
47.99.112.241
5/10
Confidence
21%
Reports
1
212.33.198.60
5/10
Confidence
21%
Reports
1
103.120.66.238
5/10
Confidence
21%
Reports
1
96.37.36.199
5/10
Confidence
21%
Reports
1
Location
US
US
2003:c6:f720:ea00:87c:84b9:ca96:82fc
5/10
Confidence
21%
Reports
1
Location
DE
DE
193.239.179.98
5/10
Confidence
21%
Reports
1
Location
LU
LU
39.100.81.174
5/10
Confidence
21%
Reports
1
Location
CN
CN
2003:c6:f720:ea00:d960:7f35:1d06:3285
5/10
Confidence
21%
Reports
1
Location
DE
DE
51.79.223.105
5/10
Confidence
21%
Reports
1
Location
SG
SG
181.235.11.136
5/10
Confidence
21%
Reports
1
Location
CO
CO
191.101.51.99
5/10
Confidence
21%
Reports
1
Location
DE
DE
146.70.8.5
5/10
Confidence
21%
Reports
1
Location
US
US
76.34.126.166
5/10
Confidence
21%
Reports
1
Location
US
US
151.240.101.35
5/10
Confidence
21%
Reports
1
Location
US
US
119.36.149.15
5/10
Confidence
21%
Reports
1
Location
CN
CN