Significant Threat
IP 101.109.119.114 identified as significant threat (8/10) from 30 events.
Multiple malicious indicators detected. Confidence level: 84%.
More threatening than 83% of monitored IPs
IP Address
101.109.119.114
IPv4
Public
TH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Thailand
Location
TOT Public Company Limite...
ASN 23969
30
Reports
Mixed
Data Source
Threat Categories
Brute-Force
20
WP Login Brute Force
10
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
2. July 2026
Last Activity
24. July 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 23969) with generally good reputation. The ISP TOT Public Company Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
83%
Verified
Confidence History
7. May 2026 - 24. Jul 2026
84%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 101.109.119.114
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
TH
- ASN
- AS23969
- ISP
- TOT Public Company Limited
DNS Information
- Reverse DNS
- node-nle.pool-101-109.dynamic.nt-isp.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 30
- First Reported
- 7 May 2026
- Last Reported
- 24 Jul 2026, 04:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS23969
TOT Public Company Limited
TH
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
212
Total IPs Monitored
1,877
Total Reports
8.9
Reports per IP
Network Context
This IP address belongs to TOT Public Company Limited (AS23969), which manages 212 IP addresses in our monitoring system. Out of these, 1,877 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 291,500 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
30
avg: 18
++
Network Comparison
Compared against 548 IPs in ASN 23969
Threat Level
8/10
network avg: 5.3
++
Total Reports
30
network avg: 4
++
Network TOT Public Company Limited has overall threat level 2/10
Geographic Comparison
Compared against 2,132 IPs in TH
Threat Level
8/10
country avg: 5.4
+
Total Reports
30
country avg: 12
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Jul 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
20
WP Login Brute Force
10
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
273,493 threat incidents tracked globally • Last 24h: 17,172 Logs
FEED
Top Threat Sources
-
01
United States61,512 22.5% -
02
India45,249 16.5% -
03
China34,047 12.4% -
04
Brazil14,653 5.4% -
05
Germany9,818 3.6% -
06
Singapore7,936 2.9% -
07
Indonesia7,832 2.9% -
08
Pakistan7,761 2.8% -
09
Russia6,145 2.2% -
10
Netherlands5,886 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
77%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
1.4.221.22
8/10
Confidence
100%
Reports
17
Location
TH
TH
182.52.149.78
8/10
Confidence
96%
Reports
14
Location
TH
TH
125.25.69.225
10/10
Confidence
94%
Reports
67
Location
TH
TH
182.52.93.228
10/10
Confidence
94%
Reports
17
Location
TH
TH
101.108.180.50
10/10
Confidence
92%
Reports
13
Location
TH
TH
125.25.32.226
8/10
Confidence
78%
Reports
7
Location
TH
TH
125.26.15.166
10/10
Confidence
76%
Reports
14
Location
TH
TH
125.27.181.91
10/10
Confidence
75%
Reports
24
Location
TH
TH
182.52.236.235
10/10
Confidence
75%
Reports
21
Location
TH
TH
101.51.225.131
10/10
Confidence
75%
Reports
13
Location
TH
TH
182.52.109.76
8/10
Confidence
74%
Reports
43
Location
TH
TH
113.53.47.46
10/10
Confidence
74%
Reports
9
Location
TH
TH
118.175.93.34
8/10
Confidence
73%
Reports
11
Location
TH
TH
182.53.38.167
10/10
Confidence
70%
Reports
43
Location
TH
TH
1.10.130.234
10/10
Confidence
68%
Reports
8
Location
TH
TH
125.25.92.248
10/10
Confidence
67%
Reports
204
Location
TH
TH
182.52.90.106
8/10
Confidence
67%
Reports
8
Location
TH
TH
1.1.253.134
10/10
Confidence
65%
Reports
127
Location
TH
TH
182.52.241.46
10/10
Confidence
64%
Reports
52
Location
TH
TH
125.26.165.15
10/10
Confidence
63%
Reports
221
Location
TH
TH
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
203.172.89.21
10/10
Confidence
100%
Reports
46
ISP
SBN-ISPAWN-ISP ...
1.4.221.22
8/10
Confidence
100%
Reports
17
ISP
TOT Public Comp...
118.27.146.111
10/10
Confidence
100%
Reports
16
ISP
GMO-Z com NetDe...
27.254.152.90
8/10
Confidence
99%
Reports
62
ISP
dragonhispeed
43.249.69.74
8/10
Confidence
99%
Reports
31
ISP
UIH
203.170.192.251
10/10
Confidence
99%
Reports
24
ISP
CS LOXINFO Publ...
117.121.214.50
10/10
Confidence
98%
Reports
29
ISP
UIH
103.27.200.76
10/10
Confidence
98%
Reports
21
ISP
Bangmod Enterpr...
202.29.225.206
10/10
Confidence
98%
Reports
18
ISP
Chulalongkorn U...
44.31.100.251
10/10
Confidence
97%
Reports
27
ISP
Siamdata Commun...
202.183.141.189
8/10
Confidence
96%
Reports
36
ISP
SBN-ISPAWN-ISP ...
101.108.51.244
10/10
Confidence
96%
Reports
14
ISP
Ministry of edu...
182.52.149.78
8/10
Confidence
96%
Reports
14
ISP
TOT Public Comp...
43.164.3.23
10/10
Confidence
96%
Reports
13
ISP
Tencent Buildin...
49.231.192.36
10/10
Confidence
95%
Reports
54
ISP
SBN-ISPAWN-ISP ...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
137.184.32.56
8/10
Confidence
84%
Reports
9,428
Location
US
US
146.190.153.30
8/10
Confidence
84%
Reports
9,319
Location
US
US
24.199.126.56
8/10
Confidence
84%
Reports
9,275
Location
US
US
209.38.70.156
8/10
Confidence
84%
Reports
9,252
Location
US
US
172.110.223.33
8/10
Confidence
84%
Reports
6,995
Location
HK
HK
178.128.32.203
8/10
Confidence
84%
Reports
6,427
Location
GB
GB
176.65.149.220
10/10
Confidence
84%
Reports
5,612
Location
NL
NL
176.65.149.55
10/10
Confidence
84%
Reports
5,276
Location
NL
NL
79.124.59.78
10/10
Confidence
84%
Reports
4,575
Location
BG
BG
2.57.121.25
10/10
Confidence
84%
Reports
3,407
Location
RO
RO
152.32.170.55
10/10
Confidence
84%
Reports
2,847
Location
HK
HK
62.171.176.188
10/10
Confidence
84%
Reports
1,343
Location
FR
FR
167.94.146.51
10/10
Confidence
84%
Reports
796
Location
US
US
64.62.156.202
8/10
Confidence
84%
Reports
743
Location
US
US
65.49.1.142
10/10
Confidence
84%
Reports
730
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13