Substantial Risk
Threat level 8/10 for 185.25.118.108 based on 90 documented incidents.
Consistent suspicious behavior patterns. 76% confidence rating.
More threatening than 83% of monitored IPs
IP Address
185.25.118.108
IPv4
Public
UA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
UA
Location
Hosting Ukraine LTD
ASN 200000
90
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
17. July 2026
Last Activity
18. July 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 200000, operated by Hosting Ukraine LTD) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
68%
High Confidence
Confidence History
22. Feb 2026 - 18. Jul 2026
76%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x4 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x3 | 75% | |
| SSH | Honeypot x4 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x4 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x7 | 75% |
Technical Details
Basic Information
- IP Address
- 185.25.118.108
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
UA
- ASN
- AS200000
- ISP
- Hosting Ukraine LTD
DNS Information
- Reverse DNS
- vps-30419.vps-default-host.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 90
- First Reported
- 1 Sep 2025
- Last Reported
- 18 Jul 2026, 07:53
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS200000
Hosting Ukraine LTD
UA
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
6
Total IPs Monitored
121
Total Reports
20.2
Reports per IP
Network Context
This IP address belongs to Hosting Ukraine LTD (AS200000), which manages 6 IP addresses in our monitoring system. Out of these, 121 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 312,141 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
90
avg: 18
++
Network Comparison
Compared against 19 IPs in ASN 200000
Threat Level
8/10
network avg: 7.3
=
Total Reports
90
network avg: 18
++
Network Hosting Ukraine LTD has overall threat level 6/10
Geographic Comparison
Compared against 1,069 IPs in UA
Threat Level
8/10
country avg: 6.4
+
Total Reports
90
country avg: 101
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 Jul 2026
4 reports
Daily Average
0.2
reports/day
Most Active
Sunday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
90
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 29 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
7.3/10
Avg Threat
42%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
185.68.18.52
8/10
Confidence
100%
Reports
111
Location
UA
UA
2a06:6440:0:2c94::1
10/10
Confidence
100%
Reports
95
Location
UA
UA
2001:67c:2070:c899::1
10/10
Confidence
71%
Reports
6
Location
UA
UA
173.242.54.159
8/10
Confidence
63%
Reports
9
Location
UA
UA
185.65.247.230
10/10
Confidence
51%
Reports
3
Location
UA
UA
91.206.200.153
8/10
Confidence
44%
Reports
3
Location
UA
UA
2a06:6440:0:2c9e::1
7/10
Confidence
40%
Reports
2
Location
UA
UA
2a00:7a60:0:7520::2
7/10
Confidence
30%
Reports
2
Location
UA
UA
185.149.41.117
7/10
Confidence
30%
Reports
1
Location
UA
UA
2a06:6440:0:2ca7::1
7/10
Confidence
29%
Reports
1
Location
UA
UA
2001:67c:2070:c8ba::1
7/10
Confidence
29%
Reports
1
Location
UA
UA
173.242.57.68
0/10
Confidence
29%
Reports
1
Location
UA
UA
2001:67c:2070:c988::1
7/10
Confidence
29%
Reports
1
Location
UA
UA
185.104.44.149
7/10
Confidence
29%
Reports
1
Location
UA
UA
185.104.44.131
7/10
Confidence
29%
Reports
1
Location
UA
UA
185.104.44.167
7/10
Confidence
29%
Reports
1
Location
UA
UA
185.25.117.32
7/10
Confidence
20%
Reports
1
Location
UA
UA
2001:67c:2070:c832::1
7/10
Confidence
10%
Reports
3
Location
UA
UA
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
109.95.33.211
10/10
Confidence
100%
Reports
114
ISP
ISP Shtorm LTD
185.68.18.52
8/10
Confidence
100%
Reports
111
ISP
Hosting Ukraine...
2a06:6440:0:2c94::1
10/10
Confidence
100%
Reports
95
ISP
Hosting Ukraine...
31.42.184.154
10/10
Confidence
100%
Reports
44
ISP
Virtual Systems...
45.88.138.45
10/10
Confidence
100%
Reports
17
ISP
Ayosoft Ltd
195.135.196.186
10/10
Confidence
100%
Reports
15
ISP
Entri LLC
2.56.111.20
10/10
Confidence
100%
Reports
14
ISP
Hasan Yavuz
193.176.251.229
10/10
Confidence
99%
Reports
31
ISP
CHP Poddubny Se...
92.113.142.203
10/10
Confidence
97%
Reports
44
ISP
IDC Cube
94.154.43.230
8/10
Confidence
96%
Reports
142
ISP
Storm Industrie...
77.83.39.197
10/10
Confidence
96%
Reports
107
ISP
Kprohost LLC
94.154.43.99
8/10
Confidence
96%
Reports
33
ISP
Storm Industrie...
91.201.108.198
8/10
Confidence
96%
Reports
27
ISP
Lugansk Telepho...
77.83.39.9
10/10
Confidence
96%
Reports
17
ISP
Kprohost LLC
94.154.43.181
8/10
Confidence
95%
Reports
26
ISP
Storm Industrie...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
76%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.5
8/10
Confidence
76%
Reports
21,108
Location
US
US
207.90.244.13
8/10
Confidence
76%
Reports
19,221
Location
US
US
64.23.161.101
8/10
Confidence
76%
Reports
17,702
Location
US
US
159.89.124.112
8/10
Confidence
76%
Reports
14,413
Location
CA
CA
64.225.74.178
8/10
Confidence
76%
Reports
11,595
Location
NL
NL
179.43.133.154
10/10
Confidence
76%
Reports
4,592
Location
CH
CH
185.156.73.166
7/10
Confidence
76%
Reports
2,518
Location
UA
UA
45.82.78.108
10/10
Confidence
76%
Reports
1,702
Location
DE
DE
184.105.247.194
8/10
Confidence
76%
Reports
1,543
Location
US
US
65.49.20.68
8/10
Confidence
76%
Reports
1,312
Location
US
US
78.153.140.39
10/10
Confidence
76%
Reports
978
Location
GB
GB
78.153.140.147
10/10
Confidence
76%
Reports
948
Location
GB
GB
78.153.140.149
10/10
Confidence
76%
Reports
947
Location
GB
GB
216.126.229.7
10/10
Confidence
76%
Reports
856
Location
DE
DE
45.156.87.211
10/10
Confidence
76%
Reports
846
Location
NL
NL