Elevated Risk
Elevated threat level 8/10 for IP 93.39.85.202 from 45 reported incidents.
Behavioral profile indicates cyber threat activity with 92% confidence.
More threatening than 81% of monitored IPs
IP Address
93.39.85.202
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
IT
Location
Fastweb
ASN 12874
45
Reports
Mixed
Data Source
Threat Categories
Hacking
26
Brute-Force
14
DDoS Attack
11
WP Login Brute Force
10
Port Scan
5
WP XML-RPC Brute Force
5
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
9. June 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 12874) with generally good reputation. The ISP Fastweb maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
92%
Verified
Confidence History
1. May 2026 - 9. Jun 2026
92%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking Brute-Force WP Login Brute Force | Honeypot | 75% |
| New | Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% |
| New | Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Bad Web Bot WP Fake SEO Bot Hacking +2 | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 93.39.85.202
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS12874
- ISP
- Fastweb
DNS Information
- Reverse DNS
- 93-39-85-202.ip75.fastwebnet.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 45
- First Reported
- 4 Apr 2026
- Last Reported
- 9 Jun 2026, 07:10
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS12874
Fastweb
IT
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
36
Total IPs Monitored
288
Total Reports
8
Reports per IP
Network Context
This IP address belongs to Fastweb (AS12874), which manages 36 IP addresses in our monitoring system. Out of these, 288 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,589 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
45
avg: 23
++
Network Comparison
Compared against 75 IPs in ASN 12874
Threat Level
8/10
network avg: 5.3
+
Total Reports
45
network avg: 5
++
Network Fastweb has overall threat level 1/10
Geographic Comparison
Compared against 1,033 IPs in IT
Threat Level
8/10
country avg: 4.4
++
Total Reports
45
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
31 May 2026
4 reports
Daily Average
0.6
reports/day
Most Active
Sunday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
41
Brute-Force
21
WP Login Brute Force
17
Port Scan
13
WP XML-RPC Brute Force
13
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.6/10
Avg Threat
56%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
93.39.209.147
10/10
Confidence
99%
Reports
30
Location
IT
IT
93.48.24.181
10/10
Confidence
98%
Reports
20
Location
IT
IT
85.18.236.229
10/10
Confidence
76%
Reports
82
Location
IT
IT
2.228.39.106
10/10
Confidence
62%
Reports
21
Location
IT
IT
93.44.242.34
8/10
Confidence
60%
Reports
7
Location
IT
IT
2.228.163.157
8/10
Confidence
54%
Reports
7
Location
IT
IT
2.229.200.226
0/10
Confidence
54%
Reports
3
Location
IT
IT
93.39.83.20
10/10
Confidence
53%
Reports
5
Location
IT
IT
93.47.178.230
0/10
Confidence
52%
Reports
4
Location
IT
IT
93.36.249.179
10/10
Confidence
51%
Reports
4
Location
IT
IT
151.0.135.76
0/10
Confidence
51%
Reports
3
Location
IT
IT
2.228.82.80
0/10
Confidence
48%
Reports
4
Location
IT
IT
93.41.144.171
8/10
Confidence
47%
Reports
7
Location
IT
IT
2.228.154.183
10/10
Confidence
47%
Reports
4
Location
IT
IT
93.44.232.45
0/10
Confidence
47%
Reports
3
Location
IT
IT
93.62.66.180
10/10
Confidence
46%
Reports
8
Location
IT
IT
2001:b07:646f:fab3:5803:9488:42ae:a21f
8/10
Confidence
46%
Reports
3
Location
IT
IT
93.40.163.210
10/10
Confidence
45%
Reports
4
Location
IT
IT
2.228.39.243
10/10
Confidence
44%
Reports
6
Location
IT
IT
93.46.174.76
0/10
Confidence
43%
Reports
3
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
79.36.191.212
8/10
Confidence
97%
Reports
24
ISP
TIM
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
176.65.149.27
10/10
Confidence
92%
Reports
3,993
Location
NL
NL
51.159.110.167
10/10
Confidence
92%
Reports
1,520
Location
FR
FR
31.70.66.9
8/10
Confidence
92%
Reports
708
Location
DE
DE
5.39.101.60
8/10
Confidence
92%
Reports
661
Location
FR
FR
207.90.244.12
10/10
Confidence
92%
Reports
543
Location
US
US
167.94.146.50
8/10
Confidence
92%
Reports
468
Location
US
US
87.106.98.147
8/10
Confidence
92%
Reports
455
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
434
Location
DE
DE
172.245.112.205
10/10
Confidence
92%
Reports
427
Location
US
US
217.160.24.45
8/10
Confidence
92%
Reports
422
Location
DE
DE
185.242.226.104
10/10
Confidence
92%
Reports
417
Location
US
US
87.106.78.3
8/10
Confidence
92%
Reports
417
Location
DE
DE
185.132.46.108
8/10
Confidence
92%
Reports
410
Location
DE
DE
87.106.189.67
8/10
Confidence
92%
Reports
409
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203