Significant Threat
IP 185.112.84.48 identified as significant threat (7/10) from 21 events.
Multiple malicious indicators detected. Confidence level: 42%.
More threatening than 73% of monitored IPs
IP Address
185.112.84.48
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
IT
Location
Planetel SPA
ASN 47217
21
Reports
Community
Data Source
Threat Categories
Brute-Force
5
WP Login Brute Force
5
Hacking
5
WP XML-RPC Brute Force
5
DDoS Attack
4
WP Cron Abuse
4
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
High-Risk Network Association
This IP belongs to a network (ASN 47217) with elevated threat levels. The ISP Planetel SPA hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
8/10
High
Confidence Score
7%
Low Confidence
Confidence History
25. Jan 2026 - 25. Feb 2026
42%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x3 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x2 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking WP Login Brute Force +1 | Community x2 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x2 | 75% | |
| WP Cron Abuse DDoS Attack WP XML-RPC Brute Force +1 | Community x2 | 75% |
Technical Details
Basic Information
- IP Address
- 185.112.84.48
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
IT
- ASN
- AS47217
- ISP
- Planetel SPA
DNS Information
- Reverse DNS
- 185-112-84-48.ip.cloud-admin.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 21
- First Reported
- 25 Jan 2026
- Last Reported
- 25 Feb 2026, 11:59
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS47217
Planetel SPA
IT
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
2
Total IPs Monitored
22
Total Reports
11
Reports per IP
Network Context
This IP address belongs to Planetel SPA (AS47217), which manages 2 IP addresses in our monitoring system. Out of these, 22 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
73
%
Global Threat Ranking
This IP is more threatening than 73% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,571 reported IPs worldwide
Threat Level
7/10
avg: 5.3
+
Total Reports
21
avg: 23
=
Network Comparison
Compared against 2 IPs in ASN 47217
Threat Level
7/10
network avg: 7.0
=
Total Reports
21
network avg: 11
++
Network Planetel SPA has overall threat level 7/10
Geographic Comparison
Compared against 1,033 IPs in IT
Threat Level
7/10
country avg: 4.4
++
Total Reports
21
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP XML-RPC Brute Force
5
Hacking
5
WP Login Brute Force
5
Brute-Force
5
WP Cron Abuse
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
38%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
79.36.191.212
8/10
Confidence
97%
Reports
24
ISP
TIM
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
IPs with similar threat level and confidence scores.
15
Related IPs
7.8/10
Avg Threat
42%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
149.40.53.3
8/10
Confidence
42%
Reports
57
Location
US
US
106.75.153.165
10/10
Confidence
42%
Reports
54
Location
CN
CN
45.149.173.219
8/10
Confidence
42%
Reports
36
Location
US
US
103.253.244.95
8/10
Confidence
42%
Reports
35
Location
ID
ID
45.149.173.227
8/10
Confidence
42%
Reports
32
Location
US
US
188.54.60.95
7/10
Confidence
42%
Reports
25
Location
SA
SA
185.177.72.10
8/10
Confidence
42%
Reports
19
Location
FR
FR
142.93.68.12
7/10
Confidence
42%
Reports
16
Location
US
US
2a09:bac5:49b:16aa::242:b1
7/10
Confidence
42%
Reports
16
Location
BD
BD
124.107.20.111
7/10
Confidence
42%
Reports
13
Location
PH
PH
193.37.32.151
10/10
Confidence
42%
Reports
13
Location
SG
SG
23.239.110.139
8/10
Confidence
42%
Reports
13
Location
US
US
49.145.188.119
7/10
Confidence
42%
Reports
13
Location
PH
PH
160.187.221.26
7/10
Confidence
42%
Reports
13
Location
PH
PH
205.185.123.235
7/10
Confidence
42%
Reports
13
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203