Elevated Risk
Elevated threat level 8/10 for IP 94.156.155.79 from 20 reported incidents.
Behavioral profile indicates cyber threat activity with 88% confidence.
More threatening than 90% of monitored IPs
IP Address
94.156.155.79
IPv4
Public
BG
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Bulgaria
Location
Serv.host Group Ltd
ASN 207957
20
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
20
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
20. September 2026
Last Activity
21. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 207957) with generally good reputation. The ISP Serv.host Group Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
87%
Verified
Confidence History
20. Sep 2026 - 21. Sep 2026
88%
Current
Stable
Trend
Security Reports (20)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 94.156.155.79
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
BG
- ASN
- AS207957
- ISP
- Serv.host Group Ltd
DNS Information
- Reverse DNS
- mail.movingbalticsea.ru
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 20
- First Reported
- 20 Sep 2026
- Last Reported
- 21 Sep 2026, 01:29
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS207957
Serv.host Group Ltd
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
12
Total IPs Monitored
84
Total Reports
7
Reports per IP
Network Context
This IP address belongs to Serv.host Group Ltd (AS207957), which manages 12 IP addresses in our monitoring system. Out of these, 84 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 833,268 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
20
avg: 9
++
Network Comparison
Compared against 44 IPs in ASN 207957
Threat Level
8/10
network avg: 7.3
=
Total Reports
20
network avg: 7
++
Network Serv.host Group Ltd has overall threat level 2/10
Geographic Comparison
Compared against 2,282 IPs in BG
Threat Level
8/10
country avg: 6.5
+
Total Reports
20
country avg: 56
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 Sep 2026
14 reports
Daily Average
0.7
reports/day
Most Active
Sunday
14 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
20
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
757,520 threat incidents tracked globally • Last 24h: 30,709 Logs
FEED
Top Threat Sources
-
01
United States148,275 19.6% -
02
Brazil111,878 14.8%
-
03
India87,206 11.5%
-
04
China46,091 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,444 2.4%
-
07
Netherlands18,000 2.4%
-
08
Pakistan17,825 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.1/10
Avg Threat
32%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
2.27.209.1
10/10
Confidence
94%
Reports
72
Location
US
US
31.76.85.80
8/10
Confidence
93%
Reports
18
Location
US
US
80.66.85.222
8/10
Confidence
57%
Reports
57
Location
DE
DE
150.241.74.83
7/10
Confidence
35%
Reports
4
Location
US
US
31.76.83.159
7/10
Confidence
32%
Reports
2
Location
US
US
91.196.33.39
4/10
Confidence
31%
Reports
2
Location
RU
RU
31.76.60.162
7/10
Confidence
30%
Reports
1
Location
US
US
31.76.83.201
6/10
Confidence
27%
Reports
2
Location
US
US
2.26.10.242
10/10
Confidence
24%
Reports
11
Location
US
US
144.31.249.203
7/10
Confidence
24%
Reports
2
Location
US
US
31.76.60.156
7/10
Confidence
24%
Reports
1
Location
US
US
2.26.89.85
7/10
Confidence
24%
Reports
1
Location
US
US
2.26.93.239
6/10
Confidence
23%
Reports
1
Location
US
US
91.196.33.55
6/10
Confidence
23%
Reports
1
Location
RU
RU
2a01:ecc0:480:52::2
6/10
Confidence
22%
Reports
1
Location
GB
GB
2.26.93.113
7/10
Confidence
19%
Reports
1
Location
US
US
77.239.107.38
7/10
Confidence
19%
Reports
1
Location
RU
RU
80.66.85.2
7/10
Confidence
18%
Reports
1
Location
DE
DE
2a01:ecc0:540:2ac::2
5/10
Confidence
13%
Reports
1
Location
GB
GB
144.31.218.74
10/10
Confidence
10%
Reports
6
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.232
10/10
Confidence
100%
Reports
366
ISP
Techoff Srv Lim...
82.147.142.205
10/10
Confidence
100%
Reports
115
ISP
A1 Bulgaria EAD
46.10.201.90
10/10
Confidence
100%
Reports
110
ISP
Vivacom Bulgari...
46.10.201.91
10/10
Confidence
100%
Reports
106
ISP
Vivacom Bulgari...
195.178.110.48
8/10
Confidence
100%
Reports
74
ISP
Techoff Srv Lim...
193.47.62.69
8/10
Confidence
100%
Reports
32
ISP
BestDC Limited
195.178.110.50
10/10
Confidence
100%
Reports
31
ISP
Techoff Srv Lim...
185.218.86.24
8/10
Confidence
100%
Reports
19
ISP
Tc Datacenter L...
109.160.32.114
10/10
Confidence
100%
Reports
18
ISP
TechTies Inc.
109.160.32.64
10/10
Confidence
100%
Reports
18
ISP
TechTies Inc.
109.160.32.160
10/10
Confidence
100%
Reports
15
ISP
TechTies Inc.
109.160.32.46
10/10
Confidence
100%
Reports
14
ISP
TechTies Inc.
109.160.32.157
10/10
Confidence
99%
Reports
24
ISP
TechTies Inc.
195.178.110.228
10/10
Confidence
98%
Reports
423
ISP
Techoff Srv Lim...
195.178.110.227
10/10
Confidence
98%
Reports
419
ISP
Techoff Srv Lim...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
186.18.175.212
8/10
Confidence
88%
Reports
22
Location
AR
AR
117.50.73.90
10/10
Confidence
88%
Reports
38
Location
CN
CN
87.106.29.151
10/10
Confidence
88%
Reports
103
Location
FR
FR
195.184.76.73
10/10
Confidence
88%
Reports
218
Location
US
US
91.196.152.148
10/10
Confidence
88%
Reports
160
Location
FR
FR
122.160.13.186
8/10
Confidence
88%
Reports
26
Location
IN
IN
45.148.10.74
8/10
Confidence
88%
Reports
75
Location
NL
NL
192.161.49.2
8/10
Confidence
88%
Reports
5,624
Location
US
US
191.52.249.155
8/10
Confidence
88%
Reports
10
Location
BR
BR
102.210.149.105
10/10
Confidence
88%
Reports
157
Location
ZA
ZA
180.76.240.16
8/10
Confidence
88%
Reports
10
Location
CN
CN
211.230.140.85
10/10
Confidence
88%
Reports
370
Location
KR
KR
66.132.195.103
8/10
Confidence
88%
Reports
69
Location
US
US
151.243.11.231
10/10
Confidence
88%
Reports
154
Location
AE
AE
69.49.246.176
10/10
Confidence
88%
Reports
154
Location
US
US