Extreme Threat
IP 181.94.226.224 classified at threat level 10/10 with 35 documented attacks.
Advanced threat indicators confirmed with 83% certainty.
More threatening than 96% of monitored IPs
IP Address
181.94.226.224
IPv4
Public
PY
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Paraguay
Location
Nucleo S.A.
ASN 27895
35
Reports
Mixed
Data Source
Threat Categories
Brute-Force
18
WP Login Brute Force
12
DDoS Attack
1
Hacking
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
8. July 2026
Last Activity
5. August 2026
Recent (7 days)
1 incidents
Moderate Network Risk
The network hosting this IP (ASN 27895, operated by Nucleo S.A.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
3/10
Low
Confidence Score
83%
Verified
Confidence History
30. May 2026 - 5. Aug 2026
83%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 181.94.226.224
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
PY
- ASN
- AS27895
- ISP
- Nucleo S.A.
DNS Information
- Reverse DNS
- host-224.personal.net.py
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 35
- First Reported
- 26 May 2026
- Last Reported
- 5 Aug 2026, 16:31
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS27895
Nucleo S.A.
PY
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
5
Total IPs Monitored
98
Total Reports
19.6
Reports per IP
Network Context
This IP address belongs to Nucleo S.A. (AS27895), which manages 5 IP addresses in our monitoring system. Out of these, 98 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 312,513 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
35
avg: 18
++
Network Comparison
Compared against 35 IPs in ASN 27895
Threat Level
10/10
network avg: 6.9
+
Total Reports
35
network avg: 7
++
Network Nucleo S.A. has overall threat level 5/10
Geographic Comparison
Compared against 138 IPs in PY
Threat Level
10/10
country avg: 6.4
++
Total Reports
35
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
10 Jul 2026
2 reports
Daily Average
0.5
reports/day
Most Active
Friday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
23
WP Login Brute Force
12
Hacking
1
DDoS Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.3/10
Avg Threat
43%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
181.103.1.206
8/10
Confidence
98%
Reports
21
Location
PY
PY
181.103.2.67
10/10
Confidence
84%
Reports
7
Location
PY
PY
181.94.250.73
8/10
Confidence
75%
Reports
68
Location
PY
PY
181.94.222.92
10/10
Confidence
60%
Reports
82
Location
PY
PY
2803:2a00:2c25:60fe:48d:3421:8acc:8e64
8/10
Confidence
48%
Reports
3
Location
PY
PY
2803:2a00:2c25:60fe:8117:8df7:9b86:a562
7/10
Confidence
40%
Reports
2
Location
PY
PY
2803:2a00:2c25:60fe:2803:3c78:2ae0:b265
7/10
Confidence
40%
Reports
2
Location
PY
PY
181.1.153.76
7/10
Confidence
40%
Reports
2
Location
PY
PY
190.104.185.249
7/10
Confidence
39%
Reports
2
Location
PY
PY
181.91.85.136
7/10
Confidence
36%
Reports
2
Location
PY
PY
181.1.152.42
10/10
Confidence
33%
Reports
4
Location
PY
PY
181.85.209.81
8/10
Confidence
33%
Reports
4
Location
PY
PY
181.91.86.71
7/10
Confidence
30%
Reports
1
Location
PY
PY
2803:2a00:2c25:60fe:344c:baf9:ae56:640d
7/10
Confidence
29%
Reports
1
Location
PY
PY
2803:2a00:2c25:60fe:e5ef:3e6f:67b:a1e
7/10
Confidence
29%
Reports
1
Location
PY
PY
2803:2a00:2c25:60fe:5d38:7b3:7385:c64f
7/10
Confidence
29%
Reports
1
Location
PY
PY
2803:2a00:2c25:60fe:8d0d:ff12:883e:5fd8
7/10
Confidence
29%
Reports
1
Location
PY
PY
190.104.161.203
0/10
Confidence
29%
Reports
1
Location
PY
PY
2803:2a00:2c25:60fe:2d04:46b9:f60:a1d7
7/10
Confidence
29%
Reports
1
Location
PY
PY
190.104.129.198
7/10
Confidence
29%
Reports
1
Location
PY
PY
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
132.255.164.117
8/10
Confidence
100%
Reports
51
ISP
SOL TELECOMUNIC...
143.202.209.172
10/10
Confidence
98%
Reports
45
ISP
RED PARAGUAYA D...
181.103.1.206
8/10
Confidence
98%
Reports
21
ISP
Nucleo S.A.
45.184.158.18
10/10
Confidence
98%
Reports
15
ISP
GRUPO SPEED NET...
143.255.141.221
10/10
Confidence
97%
Reports
18
ISP
GIG@NET SOCIEDA...
135.136.15.144
8/10
Confidence
93%
Reports
17
ISP
M247 Europe SRL
143.202.209.23
10/10
Confidence
91%
Reports
12
ISP
RED PARAGUAYA D...
190.128.201.18
10/10
Confidence
89%
Reports
20
ISP
Telecel S.A.
186.123.7.48
10/10
Confidence
88%
Reports
27
ISP
Techtel LMDS Co...
181.123.136.11
10/10
Confidence
88%
Reports
10
ISP
Telecel S.A.
181.40.78.9
10/10
Confidence
87%
Reports
35
ISP
Telecel S.A.
38.52.135.50
10/10
Confidence
87%
Reports
8
ISP
GIG@NET SOCIEDA...
201.217.12.57
10/10
Confidence
86%
Reports
62
ISP
COMPANIA PARAGU...
181.124.146.152
10/10
Confidence
86%
Reports
16
ISP
Telecel S.A.
181.103.2.67
10/10
Confidence
84%
Reports
7
ISP
Nucleo S.A.
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
64.23.214.73
8/10
Confidence
83%
Reports
10,049
Location
US
US
137.184.32.56
8/10
Confidence
83%
Reports
10,038
Location
US
US
146.190.153.30
8/10
Confidence
83%
Reports
9,943
Location
US
US
24.199.126.56
8/10
Confidence
83%
Reports
9,927
Location
US
US
209.38.70.156
8/10
Confidence
83%
Reports
9,884
Location
US
US
143.198.225.197
8/10
Confidence
83%
Reports
9,351
Location
US
US
178.128.32.203
8/10
Confidence
83%
Reports
6,835
Location
GB
GB
176.65.149.55
10/10
Confidence
83%
Reports
5,529
Location
NL
NL
79.124.59.78
10/10
Confidence
83%
Reports
4,899
Location
BG
BG
2.57.121.25
10/10
Confidence
83%
Reports
3,678
Location
RO
RO
130.12.181.108
8/10
Confidence
83%
Reports
3,208
Location
DE
DE
130.12.181.100
8/10
Confidence
83%
Reports
3,068
Location
DE
DE
152.32.170.55
10/10
Confidence
83%
Reports
2,998
Location
HK
HK
137.184.190.246
8/10
Confidence
83%
Reports
2,907
Location
US
US
2.57.122.208
10/10
Confidence
83%
Reports
2,772
Location
RO
RO