High Risk
IP 212.124.166.243 rated at threat level 8/10 based on 4 security reports.
Pattern analysis reveals concerning activity. Confidence: 69%.
More threatening than 79% of monitored IPs
IP Address
212.124.166.243
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Italy
Location
EOLO S.p.A.
ASN 35612
4
Reports
Honeypot
Data Source
Threat Categories
SSH
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
26. May 2026
Last Activity
26. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 35612) with generally good reputation. The ISP EOLO S.p.A. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
58%
High Confidence
Confidence History
26. May 2026
69%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 212.124.166.243
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
IT
- ASN
- AS35612
- ISP
- EOLO S.p.A.
DNS Information
- Reverse DNS
- 212-124-166-243.dyn.eolo.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 4
- First Reported
- 26 May 2026
- Last Reported
- 26 May 2026, 18:41
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS35612
EOLO S.p.A.
IT
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
7
Total IPs Monitored
203
Total Reports
29
Reports per IP
Network Context
This IP address belongs to EOLO S.p.A. (AS35612), which manages 7 IP addresses in our monitoring system. Out of these, 203 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,575 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
4
avg: 23
--
Network Comparison
Compared against 12 IPs in ASN 35612
Threat Level
8/10
network avg: 5.0
++
Total Reports
4
network avg: 25
--
Network EOLO S.p.A. has overall threat level 1/10
Geographic Comparison
Compared against 1,033 IPs in IT
Threat Level
8/10
country avg: 4.4
++
Total Reports
4
country avg: 11
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
4 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
11
Related IPs
4.7/10
Avg Threat
50%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
88.149.228.20
10/10
Confidence
99%
Reports
80
Location
IT
IT
78.134.49.171
10/10
Confidence
93%
Reports
73
Location
IT
IT
88.147.30.59
10/10
Confidence
90%
Reports
121
Location
IT
IT
212.124.183.40
8/10
Confidence
51%
Reports
5
Location
IT
IT
88.149.196.171
7/10
Confidence
34%
Reports
4
Location
IT
IT
81.174.47.158
0/10
Confidence
30%
Reports
2
Location
IT
IT
81.174.6.45
0/10
Confidence
30%
Reports
2
Location
IT
IT
5.157.113.86
0/10
Confidence
30%
Reports
2
Location
IT
IT
88.147.3.162
7/10
Confidence
30%
Reports
1
Location
IT
IT
78.134.25.226
0/10
Confidence
30%
Reports
1
Location
IT
IT
185.11.20.2
0/10
Confidence
30%
Reports
1
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
79.36.191.212
8/10
Confidence
97%
Reports
24
ISP
TIM
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
69%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.95.147.229
8/10
Confidence
69%
Reports
36,354
Location
NL
NL
77.83.240.70
8/10
Confidence
69%
Reports
34,366
Location
US
US
91.196.152.88
10/10
Confidence
69%
Reports
1,952
Location
FR
FR
162.216.150.49
10/10
Confidence
69%
Reports
1,912
Location
US
US
91.196.152.3
10/10
Confidence
69%
Reports
1,854
Location
FR
FR
51.91.168.102
8/10
Confidence
69%
Reports
1,760
Location
FR
FR
66.132.153.55
10/10
Confidence
69%
Reports
1,191
Location
US
US
128.14.239.39
8/10
Confidence
69%
Reports
1,142
Location
US
US
172.105.128.12
10/10
Confidence
69%
Reports
950
Location
US
US
161.132.50.196
10/10
Confidence
69%
Reports
921
Location
PE
PE
46.19.137.194
10/10
Confidence
69%
Reports
894
Location
CH
CH
35.203.210.70
10/10
Confidence
69%
Reports
863
Location
GB
GB
167.99.137.131
10/10
Confidence
69%
Reports
835
Location
DE
DE
152.32.191.98
10/10
Confidence
69%
Reports
831
Location
HK
HK
78.41.63.6
10/10
Confidence
69%
Reports
796
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203