IP Address

81.25.252.189

IPv4 Public
EE EE
AS51504
AS Telset
3 Reports
This IP is under Observation Suspicious activity detected - monitor closely
8/10 Threat
33% Confidence
3 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
EE
Estonia Location
AS Telset ASN 51504
3 Reports
Mixed Data Source

Notable Threat

IP 81.25.252.189 rated 8/10 from 3 verified reports.

Multiple security incidents attributed to this IP. Confidence: 33%.

More threatening than 88% of monitored IPs

Threat Categories

Brute-Force 3
Hacking 1
WP Login Brute Force 1

Technical Details

Brute-force attacks systematically attempt password combinations against authentication systems.

Recommended Mitigations

Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 1 week indicates persistent threat actor operations.

First Observed 14. September 2026
Last Activity 23. September 2026
Recent (7 days) 0 incidents

Reputable Network

This IP is hosted on a network (ASN 51504) with generally good reputation. The ISP AS Telset maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement appropriate security controls.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 0/10 Inactive
Confidence Score 33% Medium Confidence

Confidence History

14. Sep 2026 - 23. Sep 2026
33% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (3)

Date Categories Source Confidence
Hacking Brute-Force WP Login Brute Force Honeypot 75%
Brute-Force Community 75%
Brute-Force Community 75%

Technical Details

Basic Information

IP Address
81.25.252.189
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
EE EE
ASN
AS51504
ISP
AS Telset

DNS Information

Reverse DNS
81-25-252-189.telset.ee
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
3
First Reported
14 Sep 2026
Last Reported
23 Sep 2026, 19:44

Comparative Analysis

How this IP compares to others in our threat intelligence database

88 %

Global Threat Ranking

This IP is more threatening than 88% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 807,385 reported IPs worldwide

Threat Level 8/10 avg: 6.3 +
Total Reports 3 avg: 9 --

Network Comparison

Compared against 11 IPs in ASN 51504

Threat Level 8/10 network avg: 5.5 +
Total Reports 3 network avg: 1 ++

Geographic Comparison

Compared against 331 IPs in EE

Threat Level 8/10 country avg: 6.0 +
Total Reports 3 country avg: 5 -
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

734,114 threat incidents tracked globally • Last 24h: 28,054 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    143,446 19.5%
  2. 02
    BR
    Brazil BR
    110,780 15.1%
  3. 03
    IN
    India IN
    82,182 11.2%
  4. 04
    CN
    China CN
    44,796 6.1%
  5. 05
    SC
    SC SC
    29,234 4%
  6. 06
    DE
    Germany DE
    17,510 2.4%
  7. 07
    NL
    Netherlands NL
    17,489 2.4%
  8. 08
    PK
    Pakistan PK
    16,657 2.3%
  9. 09
    AR
    Argentina AR
    16,191 2.2%
  10. 10
    CO
    Colombia CO
    15,136 2.1%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same subnet range, likely same network segment.

1 Related IPs
5/10 Avg Threat
11% Avg Confidence
81.25.252.64 5/10
Confidence 11%
Reports 1
Location EE EE
22 Aug 2026

IPs from the same country with similar threat profiles.

15 Related IPs
8.5/10 Avg Threat
48% Avg Confidence
14 High Threat
High-risk network: Majority of related IPs are flagged
165.231.143.109 10/10
Confidence 100%
Reports 13
ISP Angelnet Limited
1 Oct 2026
5.188.16.97 8/10
Confidence 82%
Reports 10
ISP Cloud.dog Ou
19 Sep 2026
93.89.220.10 10/10
Confidence 74%
Reports 9
ISP Soulful Hosting...
24 Sep 2026
193.42.112.41 10/10
Confidence 64%
Reports 10
ISP HexCore cloud s...
3 Sep 2026
95.85.245.227 10/10
Confidence 55%
Reports 4
ISP Oc Networks Lim...
19 Sep 2026
80.79.113.226 10/10
Confidence 51%
Reports 8
ISP Aktsiaselts Wav...
9 Sep 2026
90.190.32.150 10/10
Confidence 45%
Reports 3
ISP Telia Eesti AS
28 Sep 2026
149.5.210.7 10/10
Confidence 39%
Reports 6
ISP Arvid Logicum OU
7 Sep 2026
94.246.204.146 8/10
Confidence 39%
Reports 5
ISP Telia Eesti AS
28 Sep 2026
88.196.176.124 7/10
Confidence 32%
Reports 2
ISP Telia Eesti AS
19 Sep 2026
84.50.189.161 7/10
Confidence 30%
Reports 1
ISP Telia Eesti AS
30 Sep 2026
45.83.181.86 6/10
Confidence 29%
Reports 3
ISP BlueVPS OU
1 Oct 2026
194.26.141.93 7/10
Confidence 28%
Reports 1
ISP BlueVPS OU
26 Sep 2026
88.196.159.197 7/10
Confidence 28%
Reports 1
ISP Telia Eesti AS
25 Sep 2026
88.214.21.28 7/10
Confidence 27%
Reports 1
ISP Owl Limited
24 Sep 2026

IPs with similar threat level and confidence scores.

15 Related IPs
9/10 Avg Threat
33% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
45.95.147.229 8/10
Confidence 33%
Reports 36,601
Location NL NL
23 Aug 2026
178.16.55.216 7/10
Confidence 33%
Reports 2,666
Location US US
19 Aug 2026
42.96.19.157 10/10
Confidence 33%
Reports 945
Location VN VN
17 Aug 2026
130.12.180.107 8/10
Confidence 33%
Reports 481
Location NL NL
19 Aug 2026
172.118.64.144 10/10
Confidence 33%
Reports 281
Location US US
15 Aug 2026
199.45.155.107 8/10
Confidence 33%
Reports 277
Location US US
19 Aug 2026
135.237.125.143 8/10
Confidence 33%
Reports 241
Location US US
22 Aug 2026
115.146.125.52 8/10
Confidence 33%
Reports 217
Location VN VN
19 Aug 2026
165.227.47.218 8/10
Confidence 33%
Reports 200
Location CA CA
22 Aug 2026
123.253.39.253 10/10
Confidence 33%
Reports 171
Location BD BD
16 Aug 2026
217.118.177.195 10/10
Confidence 33%
Reports 150
Location RU RU
22 Aug 2026
141.148.33.145 10/10
Confidence 33%
Reports 143
Location US US
17 Aug 2026
124.116.23.182 10/10
Confidence 33%
Reports 142
Location CN CN
20 Aug 2026
185.224.128.14 10/10
Confidence 33%
Reports 131
Location NL NL
21 Aug 2026
198.98.56.227 10/10
Confidence 33%
Reports 119
Location US US
17 Aug 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "81.25.252.189",
    "threat_level": 8,
    "confidence_score": 33,
    "total_reports": 3,
    "country_code": "EE",
    "isp_name": "AS Telset",
    "asn": "51504",
    "first_reported": "2026-09-14 07:22:40",
    "last_reported": "2026-09-23 19:44:51",
    "exported_at": "2026-10-01T07:20:28+02:00",
    "source": "https://reportedip.com/ip/81.25.252.189/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses