Significant Threat
IP 109.165.224.110 identified as significant threat (8/10) from 3 events.
Multiple malicious indicators detected. Confidence level: 46%.
More threatening than 76% of monitored IPs
IP Address
109.165.224.110
IPv4
Public
BA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Bosnia and Herzegovina
Location
Telekomunikacije Republik...
ASN 25144
3
Reports
Mixed
Data Source
Threat Categories
Brute-Force
2
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 days indicates persistent threat actor operations.
First Observed
24. May 2026
Last Activity
25. May 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 25144, operated by Telekomunikacije Republike Srpske akcionarsko drustvo Banja Luka) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
33%
Medium Confidence
Confidence History
24. May 2026 - 25. May 2026
46%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 109.165.224.110
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
BA
- ASN
- AS25144
- ISP
- Telekomunikacije Republike Srpske akcionarsko drustvo Banja Luka
DNS Information
- Reverse DNS
- adsl-165-224-110.teol.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 3
- First Reported
- 24 May 2026
- Last Reported
- 25 May 2026, 05:38
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS25144
Telekomunikacije Republike Srpske akcionarsko drustvo Banja Luka
BA
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
4
Total IPs Monitored
4
Total Reports
1
Reports per IP
Network Context
This IP address belongs to Telekomunikacije Republike Srpske akcionarsko drustvo Banja Luka (AS25144), which manages 4 IP addresses in our monitoring system. Out of these, 4 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
76
%
Global Threat Ranking
This IP is more threatening than 76% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 200,047 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
3
avg: 23
--
Network Comparison
Compared against 59 IPs in ASN 25144
Threat Level
8/10
network avg: 4.8
++
Total Reports
3
network avg: 2
++
Network Telekomunikacije Republike Srpske akcionarsko drustvo Banja Luka has overall threat level 4/10
Geographic Comparison
Compared against 144 IPs in BA
Threat Level
8/10
country avg: 5.7
+
Total Reports
3
country avg: 3
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
25 May 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Monday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
2
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,719 threat incidents tracked globally • Last 24h: 18,896 Logs
FEED
Top Threat Sources
-
01
United States38,493 20.5% -
02
India29,262 15.6% -
03
China26,047 13.9% -
04
Brazil10,264 5.5% -
05
Germany7,151 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,560 3% -
08
Russia4,712 2.5% -
09
Pakistan4,710 2.5% -
10
Netherlands4,363 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
5.4/10
Avg Threat
37%
Avg Confidence
7
High Threat
Elevated risk: Multiple related IPs are flagged
94.250.61.10
10/10
Confidence
94%
Reports
28
Location
BA
BA
109.165.225.62
8/10
Confidence
46%
Reports
3
Location
BA
BA
109.165.224.204
8/10
Confidence
46%
Reports
3
Location
BA
BA
109.165.174.112
7/10
Confidence
40%
Reports
2
Location
BA
BA
109.165.227.86
7/10
Confidence
40%
Reports
2
Location
BA
BA
109.165.224.240
7/10
Confidence
40%
Reports
2
Location
BA
BA
109.165.224.91
7/10
Confidence
40%
Reports
2
Location
BA
BA
109.165.225.231
0/10
Confidence
39%
Reports
2
Location
BA
BA
45.131.118.206
0/10
Confidence
30%
Reports
1
Location
BA
BA
109.165.227.119
0/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.227.249
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.225.158
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.226.74
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.225.43
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.226.10
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.144.121
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.226.162
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.227.68
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.224.56
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.227.27
0/10
Confidence
29%
Reports
2
Location
BA
BA
IPs from the same subnet range, likely same network segment.
9
Related IPs
5.1/10
Avg Threat
32%
Avg Confidence
3
High Threat
Elevated risk: Multiple related IPs are flagged
109.165.224.204
8/10
Confidence
46%
Reports
3
Location
BA
BA
109.165.224.240
7/10
Confidence
40%
Reports
2
Location
BA
BA
109.165.224.91
7/10
Confidence
40%
Reports
2
Location
BA
BA
109.165.224.56
6/10
Confidence
29%
Reports
2
Location
BA
BA
109.165.224.167
0/10
Confidence
29%
Reports
1
Location
BA
BA
109.165.224.193
0/10
Confidence
29%
Reports
1
Location
BA
BA
109.165.224.31
6/10
Confidence
27%
Reports
2
Location
BA
BA
109.165.224.49
6/10
Confidence
23%
Reports
1
Location
BA
BA
109.165.224.142
6/10
Confidence
23%
Reports
1
Location
BA
BA
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
72%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
172.216.246.36
10/10
Confidence
94%
Reports
42
ISP
Cyberzone S.A.
185.65.107.14
10/10
Confidence
94%
Reports
33
ISP
Net-Flet d.o.o.
94.250.61.10
10/10
Confidence
94%
Reports
28
ISP
Telekomunikacij...
172.216.246.54
10/10
Confidence
92%
Reports
17
ISP
Cyberzone S.A.
172.216.246.38
10/10
Confidence
89%
Reports
12
ISP
Cyberzone S.A.
109.175.27.48
10/10
Confidence
88%
Reports
10
ISP
BH Telecom d.d....
98.159.36.3
10/10
Confidence
76%
Reports
29
ISP
GSL Networks Pt...
178.236.83.21
8/10
Confidence
73%
Reports
11
ISP
Telemach BH d.o...
31.176.190.216
10/10
Confidence
65%
Reports
62
ISP
BH Telecom d.d....
109.175.27.51
8/10
Confidence
62%
Reports
8
ISP
BH Telecom d.d....
98.159.36.146
10/10
Confidence
53%
Reports
4
ISP
GSL Networks Pt...
178.209.5.12
8/10
Confidence
51%
Reports
5
ISP
Telemach BH d.o...
109.163.177.237
0/10
Confidence
51%
Reports
3
ISP
BH Telecom d.d....
172.216.246.52
10/10
Confidence
47%
Reports
3
ISP
Cyberzone S.A.
109.165.225.62
8/10
Confidence
46%
Reports
3
ISP
Telekomunikacij...
IPs with similar threat level and confidence scores.
15
Related IPs
7.9/10
Avg Threat
46%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
192.42.116.210
10/10
Confidence
46%
Reports
66
Location
NL
NL
20.200.210.155
8/10
Confidence
46%
Reports
47
Location
KR
KR
46.182.4.125
10/10
Confidence
46%
Reports
35
Location
FR
FR
194.26.192.196
6/10
Confidence
46%
Reports
31
Location
NL
NL
169.150.203.235
8/10
Confidence
46%
Reports
31
Location
US
US
196.251.87.12
10/10
Confidence
46%
Reports
30
Location
NL
NL
209.141.32.218
7/10
Confidence
46%
Reports
28
Location
US
US
154.221.22.20
10/10
Confidence
46%
Reports
22
Location
HK
HK
202.164.57.245
7/10
Confidence
46%
Reports
17
Location
IN
IN
185.220.101.98
8/10
Confidence
46%
Reports
17
Location
DE
DE
126.209.112.104
7/10
Confidence
46%
Reports
16
Location
PH
PH
185.94.82.20
7/10
Confidence
46%
Reports
16
Location
IT
IT
112.207.105.22
7/10
Confidence
46%
Reports
15
Location
PH
PH
126.209.112.107
7/10
Confidence
46%
Reports
15
Location
PH
PH
27.5.237.131
7/10
Confidence
46%
Reports
14
Location
IN
IN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203