Critical Alert
Security alert: 201.249.205.94 rated 10/10 based on 137 verified incidents.
Threat profile indicates sustained malicious activity with 61% confidence rating.
More threatening than 98% of monitored IPs
IP Address
201.249.205.94
IPv4
Public
VE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
VE
Location
CANTV Servicios, Venezuel...
ASN 8048
137
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
4
Brute-Force
3
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
8. September 2026
Last Activity
8. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 8048, operated by CANTV Servicios, Venezuela) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
60%
High Confidence
Confidence History
26. May 2026 - 8. Sep 2026
61%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 201.249.205.94
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
VE
- ASN
- AS8048
- ISP
- CANTV Servicios, Venezuela
DNS Information
- Reverse DNS
- 201-249-201-94.chc-00.rai.cantv.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 137
- First Reported
- 21 Feb 2026
- Last Reported
- 8 Sep 2026, 17:58
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8048
CANTV Servicios, Venezuela
VE
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
124
Total IPs Monitored
1,046
Total Reports
8.4
Reports per IP
Network Context
This IP address belongs to CANTV Servicios, Venezuela (AS8048), which manages 124 IP addresses in our monitoring system. Out of these, 1,046 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 806,232 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
137
avg: 9
++
Network Comparison
Compared against 597 IPs in ASN 8048
Threat Level
10/10
network avg: 6.0
++
Total Reports
137
network avg: 3
++
Network CANTV Servicios, Venezuela has overall threat level 5/10
Geographic Comparison
Compared against 6,037 IPs in VE
Threat Level
10/10
country avg: 5.3
++
Total Reports
137
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Sep 2026
7 reports
Daily Average
0.2
reports/day
Most Active
Monday
28 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
134
Hacking
36
Exploited Host
10
Brute-Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
733,188 threat incidents tracked globally • Last 24h: 28,825 Logs
FEED
Top Threat Sources
-
01
United States143,190 19.5% -
02
Brazil110,727 15.1%
-
03
India82,109 11.2%
-
04
China44,727 6.1%
-
05
SC29,233 4%
-
06
Germany17,474 2.4%
-
07
Netherlands17,459 2.4%
-
08
Pakistan16,628 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
62%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
190.75.152.101
8/10
Confidence
100%
Reports
14
Location
VE
VE
190.202.89.69
10/10
Confidence
94%
Reports
219
Location
VE
VE
190.202.87.179
10/10
Confidence
90%
Reports
9
Location
VE
VE
201.249.192.30
10/10
Confidence
86%
Reports
168
Location
VE
VE
190.202.88.51
10/10
Confidence
83%
Reports
42
Location
VE
VE
201.249.71.251
10/10
Confidence
81%
Reports
15
Location
VE
VE
190.202.83.181
8/10
Confidence
68%
Reports
6
Location
VE
VE
201.249.87.203
10/10
Confidence
67%
Reports
63
Location
VE
VE
201.248.70.122
10/10
Confidence
64%
Reports
13
Location
VE
VE
201.248.67.246
10/10
Confidence
63%
Reports
133
Location
VE
VE
201.249.89.102
10/10
Confidence
62%
Reports
28
Location
VE
VE
190.202.7.78
10/10
Confidence
53%
Reports
15
Location
VE
VE
201.248.68.246
10/10
Confidence
53%
Reports
10
Location
VE
VE
201.243.146.152
10/10
Confidence
53%
Reports
4
Location
VE
VE
201.249.166.171
10/10
Confidence
47%
Reports
15
Location
VE
VE
190.199.186.222
10/10
Confidence
43%
Reports
16
Location
VE
VE
190.202.5.52
10/10
Confidence
41%
Reports
4
Location
VE
VE
190.75.82.62
8/10
Confidence
33%
Reports
4
Location
VE
VE
200.109.233.2
7/10
Confidence
33%
Reports
2
Location
VE
VE
190.202.18.190
10/10
Confidence
32%
Reports
4
Location
VE
VE
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
3%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
189.127.167.6
8/10
Confidence
100%
Reports
19
ISP
RED SERVITEL, CA
190.75.152.101
8/10
Confidence
100%
Reports
14
ISP
CANTV Servicios...
38.17.158.68
8/10
Confidence
97%
Reports
19
ISP
TELECOMUNICACIO...
190.202.89.69
10/10
Confidence
94%
Reports
219
ISP
CANTV Servicios...
190.202.87.179
10/10
Confidence
90%
Reports
9
ISP
CANTV Servicios...
201.249.192.30
10/10
Confidence
86%
Reports
168
ISP
CANTV Servicios...
38.43.208.5
10/10
Confidence
85%
Reports
12
ISP
FULL DATA COMUN...
190.202.88.51
10/10
Confidence
83%
Reports
42
ISP
CANTV Servicios...
201.249.71.251
10/10
Confidence
81%
Reports
15
ISP
CANTV Servicios...
189.127.167.192
8/10
Confidence
78%
Reports
31
ISP
RED SERVITEL, CA
154.23.13.147
8/10
Confidence
74%
Reports
6
ISP
4 EVER PLUG,C.A.
190.153.120.64
10/10
Confidence
73%
Reports
15
ISP
Net Uno, C.A.
200.8.228.57
8/10
Confidence
72%
Reports
16
ISP
Corporacion Tel...
181.225.50.2
10/10
Confidence
70%
Reports
19
ISP
IFX Networks Ve...
200.35.109.130
10/10
Confidence
69%
Reports
83
ISP
TELEFONICA VENE...
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
61%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
78.153.140.40
8/10
Confidence
61%
Reports
901
Location
GB
GB
204.76.203.51
10/10
Confidence
61%
Reports
531
Location
NL
NL
5.135.106.93
8/10
Confidence
61%
Reports
463
Location
FR
FR
152.32.197.159
10/10
Confidence
61%
Reports
321
Location
BR
BR
64.62.197.241
10/10
Confidence
61%
Reports
268
Location
US
US
112.27.178.171
10/10
Confidence
61%
Reports
247
Location
CN
CN
216.180.246.182
10/10
Confidence
61%
Reports
238
Location
US
US
92.205.57.72
10/10
Confidence
61%
Reports
236
Location
FR
FR
165.154.36.107
10/10
Confidence
61%
Reports
210
Location
US
US
194.164.192.228
8/10
Confidence
61%
Reports
200
Location
DE
DE
42.1.67.220
10/10
Confidence
61%
Reports
163
Location
VN
VN
198.144.183.125
10/10
Confidence
61%
Reports
159
Location
US
US
103.158.162.242
10/10
Confidence
61%
Reports
147
Location
ID
ID
85.217.149.49
10/10
Confidence
61%
Reports
134
Location
CA
CA
167.249.227.120
10/10
Confidence
61%
Reports
105
Location
BR
BR