Elevated Risk
Elevated threat level 8/10 for IP 5.89.75.194 from 13 reported incidents.
Behavioral profile indicates cyber threat activity with 91% confidence.
More threatening than 81% of monitored IPs
IP Address
5.89.75.194
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Italy
Location
Fastweb
ASN 30722
13
Reports
Honeypot
Data Source
Threat Categories
SSH
13
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
17. May 2026
Last Activity
31. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 30722) with generally good reputation. The ISP Fastweb maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
81%
Verified
Confidence History
25. Apr 2026 - 31. May 2026
91%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.89.75.194
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS30722
- ISP
- Fastweb
DNS Information
- Reverse DNS
- net-5-89-75-194.cust.vodafonedsl.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 13
- First Reported
- 4 May 2026
- Last Reported
- 31 May 2026, 06:41
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS30722
Fastweb
IT
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
40
Total IPs Monitored
328
Total Reports
8.2
Reports per IP
Network Context
This IP address belongs to Fastweb (AS30722), which manages 40 IP addresses in our monitoring system. Out of these, 328 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,719 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
13
avg: 23
-
Network Comparison
Compared against 88 IPs in ASN 30722
Threat Level
8/10
network avg: 5.1
++
Total Reports
13
network avg: 5
++
Network Fastweb has overall threat level 3/10
Geographic Comparison
Compared against 1,034 IPs in IT
Threat Level
8/10
country avg: 4.4
++
Total Reports
13
country avg: 11
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 May 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Sunday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
13
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.4/10
Avg Threat
68%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
2.32.201.235
8/10
Confidence
98%
Reports
22
Location
IT
IT
5.95.121.178
10/10
Confidence
96%
Reports
14
Location
IT
IT
93.71.118.99
10/10
Confidence
93%
Reports
131
Location
IT
IT
91.80.152.183
8/10
Confidence
89%
Reports
9
Location
IT
IT
5.95.62.31
8/10
Confidence
87%
Reports
10
Location
IT
IT
31.156.193.220
10/10
Confidence
84%
Reports
8
Location
IT
IT
91.80.172.189
10/10
Confidence
81%
Reports
6
Location
IT
IT
93.67.147.196
8/10
Confidence
67%
Reports
8
Location
IT
IT
109.115.239.23
8/10
Confidence
67%
Reports
8
Location
IT
IT
93.144.53.74
8/10
Confidence
62%
Reports
16
Location
IT
IT
5.91.218.160
8/10
Confidence
62%
Reports
9
Location
IT
IT
83.224.141.42
8/10
Confidence
62%
Reports
7
Location
IT
IT
109.116.201.6
8/10
Confidence
59%
Reports
7
Location
IT
IT
188.152.238.126
8/10
Confidence
54%
Reports
4
Location
IT
IT
130.25.4.132
7/10
Confidence
52%
Reports
21
Location
IT
IT
188.152.1.181
10/10
Confidence
51%
Reports
3
Location
IT
IT
2.39.162.247
0/10
Confidence
51%
Reports
3
Location
IT
IT
91.80.135.190
0/10
Confidence
48%
Reports
3
Location
IT
IT
188.217.165.42
10/10
Confidence
47%
Reports
3
Location
IT
IT
93.149.38.138
0/10
Confidence
43%
Reports
2
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
79.36.191.212
8/10
Confidence
97%
Reports
24
ISP
TIM
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
172.110.223.33
8/10
Confidence
91%
Reports
6,495
Location
HK
HK
94.154.35.215
10/10
Confidence
91%
Reports
5,704
Location
NL
NL
176.65.149.224
10/10
Confidence
91%
Reports
4,967
Location
NL
NL
176.65.149.67
10/10
Confidence
91%
Reports
4,066
Location
NL
NL
176.65.149.30
10/10
Confidence
91%
Reports
3,892
Location
NL
NL
194.50.16.198
8/10
Confidence
91%
Reports
2,443
Location
NL
NL
91.92.243.76
8/10
Confidence
91%
Reports
1,771
Location
US
US
185.218.138.11
7/10
Confidence
91%
Reports
1,522
Location
US
US
185.218.138.14
7/10
Confidence
91%
Reports
1,454
Location
US
US
137.184.112.192
8/10
Confidence
91%
Reports
1,419
Location
US
US
185.218.138.13
8/10
Confidence
91%
Reports
1,387
Location
US
US
88.210.63.3
8/10
Confidence
91%
Reports
1,377
Location
UA
UA
92.63.197.80
8/10
Confidence
91%
Reports
1,351
Location
UA
UA
92.63.197.79
8/10
Confidence
91%
Reports
1,333
Location
UA
UA
88.210.63.5
8/10
Confidence
91%
Reports
1,308
Location
UA
UA
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203