Elevated Risk
Elevated threat level 8/10 for IP 172.94.9.125 from 57 reported incidents.
Behavioral profile indicates cyber threat activity with 69% confidence.
More threatening than 90% of monitored IPs
IP Address
172.94.9.125
IPv4
Public
IR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
IR
Location
Limited Network LTD
ASN 213790
57
Reports
Mixed
Data Source
Threat Categories
SSH
23
Hacking
12
Email Spam
4
Exploited Host
2
Brute-Force
2
Port Scan
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
15. October 2026
Last Activity
15. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 213790) with generally good reputation. The ISP Limited Network LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
69%
High Confidence
Confidence History
4. Mar 2026 - 15. Oct 2026
69%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan | Community | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH Hacking Brute-Force | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking Brute-Force | Honeypot x5 | 75% |
Technical Details
Basic Information
- IP Address
- 172.94.9.125
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
IR
- ASN
- AS213790
- ISP
- Limited Network LTD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 57
- First Reported
- 4 Mar 2026
- Last Reported
- 15 Oct 2026, 00:43
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213790
Limited Network LTD
IR
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
151
Total IPs Monitored
7,957
Total Reports
52.7
Reports per IP
Network Context
This IP address belongs to Limited Network LTD (AS213790), which manages 151 IP addresses in our monitoring system. Out of these, 7,957 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 993,009 reported IPs worldwide
Threat Level
8/10
avg: 6.2
+
Total Reports
57
avg: 8
++
Network Comparison
Compared against 296 IPs in ASN 213790
Threat Level
8/10
network avg: 8.1
=
Total Reports
57
network avg: 63
=
Network Limited Network LTD has overall threat level 1/10
Geographic Comparison
Compared against 1,852 IPs in IR
Threat Level
8/10
country avg: 7.2
=
Total Reports
57
country avg: 27
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Wednesday
45 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
50
Hacking
18
Brute-Force
8
Email Spam
4
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
905,438 threat incidents tracked globally • Last 24h: 218,765 Logs
FEED
Top Threat Sources
-
01
United States179,561 19.8% -
02
Brazil153,641 17%
-
03
India94,269 10.4%
-
04
China47,756 5.3%
-
05
SC29,341 3.2%
-
06
Argentina23,902 2.6%
-
07
Germany19,991 2.2%
-
08
Pakistan19,372 2.1%
-
09
Netherlands18,800 2.1%
-
10
Colombia18,088 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
87%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
172.94.9.202
8/10
Confidence
100%
Reports
14
Location
US
US
185.93.89.116
8/10
Confidence
100%
Reports
13
Location
IR
IR
172.94.9.151
8/10
Confidence
98%
Reports
16
Location
US
US
192.253.248.87
7/10
Confidence
96%
Reports
28
Location
NL
NL
192.253.248.251
10/10
Confidence
94%
Reports
2,015
Location
IR
IR
77.90.185.243
10/10
Confidence
94%
Reports
28
Location
IR
IR
172.94.9.96
7/10
Confidence
94%
Reports
12
Location
IR
IR
77.90.185.20
8/10
Confidence
91%
Reports
193
Location
IR
IR
185.93.89.135
10/10
Confidence
87%
Reports
16
Location
IR
IR
172.94.9.152
8/10
Confidence
87%
Reports
9
Location
US
US
77.90.185.244
10/10
Confidence
85%
Reports
11
Location
DE
DE
192.253.248.229
8/10
Confidence
84%
Reports
873
Location
IR
IR
77.90.185.78
10/10
Confidence
81%
Reports
182
Location
IR
IR
77.90.185.84
8/10
Confidence
81%
Reports
7
Location
DE
DE
192.253.248.223
8/10
Confidence
80%
Reports
868
Location
IR
IR
77.90.185.54
8/10
Confidence
80%
Reports
7
Location
DE
DE
192.253.248.226
10/10
Confidence
79%
Reports
855
Location
IR
IR
185.93.89.167
8/10
Confidence
79%
Reports
99
Location
IR
IR
172.94.9.222
10/10
Confidence
79%
Reports
17
Location
IR
IR
192.253.248.173
8/10
Confidence
78%
Reports
56
Location
IR
IR
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.3/10
Avg Threat
59%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
172.94.9.202
8/10
Confidence
100%
Reports
14
Location
US
US
172.94.9.151
8/10
Confidence
98%
Reports
16
Location
US
US
172.94.9.96
7/10
Confidence
94%
Reports
12
Location
IR
IR
172.94.9.152
8/10
Confidence
87%
Reports
9
Location
US
US
172.94.9.64
8/10
Confidence
80%
Reports
136
Location
US
US
172.94.9.222
10/10
Confidence
79%
Reports
17
Location
IR
IR
172.94.9.74
10/10
Confidence
77%
Reports
24
Location
IR
IR
172.94.9.73
8/10
Confidence
73%
Reports
19
Location
IR
IR
172.94.9.50
8/10
Confidence
64%
Reports
8
Location
IR
IR
172.94.9.193
10/10
Confidence
57%
Reports
28
Location
IR
IR
172.94.9.55
8/10
Confidence
54%
Reports
21
Location
IR
IR
172.94.9.107
7/10
Confidence
47%
Reports
26
Location
IR
IR
172.94.9.32
8/10
Confidence
43%
Reports
6
Location
IR
IR
172.94.9.89
7/10
Confidence
41%
Reports
6
Location
IR
IR
172.94.9.57
8/10
Confidence
40%
Reports
117
Location
US
US
172.94.9.53
10/10
Confidence
34%
Reports
10
Location
IR
IR
172.94.9.108
7/10
Confidence
29%
Reports
2
Location
US
US
172.94.9.223
7/10
Confidence
28%
Reports
5
Location
US
US
172.94.9.28
10/10
Confidence
26%
Reports
5
Location
IR
IR
172.94.9.159
8/10
Confidence
25%
Reports
82
Location
IR
IR
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2.188.206.146
10/10
Confidence
100%
Reports
182
ISP
Respina Network...
62.60.130.242
8/10
Confidence
100%
Reports
35
ISP
Cipher Operatio...
62.60.130.253
8/10
Confidence
100%
Reports
33
ISP
Cipher Operatio...
62.60.130.201
8/10
Confidence
100%
Reports
25
ISP
Cipher Operatio...
85.185.201.10
8/10
Confidence
100%
Reports
18
ISP
Iran Telecommun...
94.182.168.135
8/10
Confidence
100%
Reports
15
ISP
Aria Shatel PJSC
185.93.89.116
8/10
Confidence
100%
Reports
13
ISP
Limited Network...
152.89.12.101
10/10
Confidence
98%
Reports
22
ISP
Sharif Universi...
85.198.19.251
10/10
Confidence
98%
Reports
19
ISP
Asre Dadeha Asi...
62.133.46.29
8/10
Confidence
96%
Reports
36
ISP
M247 Europe SRL
78.38.84.140
10/10
Confidence
96%
Reports
25
ISP
Iran Telecommun...
130.193.77.236
8/10
Confidence
96%
Reports
21
ISP
Sefroyek Pardaz...
2.189.128.6
10/10
Confidence
96%
Reports
21
ISP
Toloe Rayaneh L...
85.198.19.241
10/10
Confidence
96%
Reports
21
ISP
Asre Dadeha Asi...
192.253.248.251
10/10
Confidence
94%
Reports
2,015
ISP
Limited Network...
IPs with similar threat level and confidence scores.
15
Related IPs
6.5/10
Avg Threat
69%
Avg Confidence
2
High Threat
92.71.23.91
6/10
Confidence
69%
Reports
9
Location
US
US
156.230.182.63
10/10
Confidence
69%
Reports
6
Location
ID
ID
94.176.54.107
6/10
Confidence
69%
Reports
9
Location
US
US
198.55.118.166
6/10
Confidence
69%
Reports
9
Location
US
US
206.204.22.179
6/10
Confidence
69%
Reports
9
Location
US
US
103.82.222.38
6/10
Confidence
69%
Reports
9
Location
US
US
212.46.145.226
6/10
Confidence
69%
Reports
9
Location
US
US
198.64.231.66
6/10
Confidence
69%
Reports
9
Location
US
US
158.94.201.121
6/10
Confidence
69%
Reports
9
Location
US
US
45.182.212.148
10/10
Confidence
69%
Reports
33
Location
BR
BR
154.36.70.67
6/10
Confidence
69%
Reports
9
Location
US
US
207.45.27.108
6/10
Confidence
69%
Reports
9
Location
US
US
104.223.91.141
6/10
Confidence
69%
Reports
9
Location
US
US
207.29.204.240
6/10
Confidence
69%
Reports
9
Location
US
US
202.81.214.110
6/10
Confidence
69%
Reports
9
Location
US
US