High Risk
IP 109.115.239.23 rated at threat level 8/10 based on 8 security reports.
Pattern analysis reveals concerning activity. Confidence: 67%.
More threatening than 79% of monitored IPs
IP Address
109.115.239.23
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Italy
Location
Fastweb
ASN 30722
8
Reports
Honeypot
Data Source
Threat Categories
Hacking
8
Brute-Force
4
WP Login Brute Force
4
Port Scan
4
WP XML-RPC Brute Force
4
Bad Web Bot
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 30722) with generally good reputation. The ISP Fastweb maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
52%
High Confidence
Confidence History
2. May 2026 - 4. May 2026
67%
Current
Stable
Trend
Security Reports (8)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Bad Web Bot WP Fake SEO Bot Hacking +2 | Honeypot x2 | 75% | |
| Port Scan Hacking Bad Web Bot +2 | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 109.115.239.23
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS30722
- ISP
- Fastweb
DNS Information
- Reverse DNS
- net-109-115-239-23.cust.vodafonedsl.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 8
- First Reported
- 4 May 2026
- Last Reported
- 4 May 2026, 04:56
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS30722
Fastweb
IT
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
40
Total IPs Monitored
328
Total Reports
8.2
Reports per IP
Network Context
This IP address belongs to Fastweb (AS30722), which manages 40 IP addresses in our monitoring system. Out of these, 328 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,571 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
8
avg: 23
--
Network Comparison
Compared against 88 IPs in ASN 30722
Threat Level
8/10
network avg: 5.1
++
Total Reports
8
network avg: 5
++
Network Fastweb has overall threat level 3/10
Geographic Comparison
Compared against 1,033 IPs in IT
Threat Level
8/10
country avg: 4.4
++
Total Reports
8
country avg: 11
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
8
Port Scan
4
WP XML-RPC Brute Force
4
Brute-Force
4
WP Login Brute Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.4/10
Avg Threat
69%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
2.32.201.235
8/10
Confidence
98%
Reports
22
Location
IT
IT
5.95.121.178
10/10
Confidence
96%
Reports
14
Location
IT
IT
93.71.118.99
10/10
Confidence
93%
Reports
131
Location
IT
IT
5.89.75.194
8/10
Confidence
91%
Reports
13
Location
IT
IT
91.80.152.183
8/10
Confidence
89%
Reports
9
Location
IT
IT
5.95.62.31
8/10
Confidence
87%
Reports
10
Location
IT
IT
31.156.193.220
10/10
Confidence
84%
Reports
8
Location
IT
IT
91.80.172.189
10/10
Confidence
81%
Reports
6
Location
IT
IT
93.67.147.196
8/10
Confidence
67%
Reports
8
Location
IT
IT
93.144.53.74
8/10
Confidence
62%
Reports
16
Location
IT
IT
5.91.218.160
8/10
Confidence
62%
Reports
9
Location
IT
IT
83.224.141.42
8/10
Confidence
62%
Reports
7
Location
IT
IT
109.116.201.6
8/10
Confidence
59%
Reports
7
Location
IT
IT
188.152.238.126
8/10
Confidence
54%
Reports
4
Location
IT
IT
130.25.4.132
7/10
Confidence
52%
Reports
21
Location
IT
IT
188.152.1.181
10/10
Confidence
51%
Reports
3
Location
IT
IT
2.39.162.247
0/10
Confidence
51%
Reports
3
Location
IT
IT
91.80.135.190
0/10
Confidence
48%
Reports
3
Location
IT
IT
188.217.165.42
10/10
Confidence
47%
Reports
3
Location
IT
IT
93.149.38.138
0/10
Confidence
43%
Reports
2
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
79.36.191.212
8/10
Confidence
97%
Reports
24
ISP
TIM
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
67%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
119.96.159.237
10/10
Confidence
67%
Reports
1,904
Location
CN
CN
152.32.135.214
10/10
Confidence
67%
Reports
1,466
Location
HK
HK
180.153.91.15
10/10
Confidence
67%
Reports
1,424
Location
CN
CN
66.132.153.50
10/10
Confidence
67%
Reports
1,350
Location
US
US
77.83.39.249
7/10
Confidence
67%
Reports
1,106
Location
UA
UA
167.99.141.235
8/10
Confidence
67%
Reports
1,100
Location
DE
DE
130.12.180.80
10/10
Confidence
67%
Reports
976
Location
GB
GB
45.135.232.177
8/10
Confidence
67%
Reports
876
Location
RU
RU
120.48.175.69
10/10
Confidence
67%
Reports
857
Location
CN
CN
103.105.66.26
10/10
Confidence
67%
Reports
726
Location
ID
ID
23.94.38.226
10/10
Confidence
67%
Reports
717
Location
US
US
207.90.244.23
8/10
Confidence
67%
Reports
684
Location
US
US
115.247.46.121
10/10
Confidence
67%
Reports
666
Location
IN
IN
204.76.203.18
10/10
Confidence
67%
Reports
591
Location
NL
NL
136.114.224.44
10/10
Confidence
67%
Reports
571
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203