Substantial Risk
Threat level 8/10 for 79.36.191.212 based on 24 documented incidents.
Consistent suspicious behavior patterns. 97% confidence rating.
More threatening than 82% of monitored IPs
IP Address
79.36.191.212
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Italy
Location
TIM
ASN 3269
24
Reports
Honeypot
Data Source
Threat Categories
SSH
24
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
26. May 2026
Last Activity
8. June 2026
Recent (7 days)
6 incidents
Reputable Network
This IP is hosted on a network (ASN 3269) with generally good reputation. The ISP TIM maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
97%
Verified
Confidence History
26. May 2026 - 8. Jun 2026
97%
Current
Stable
Trend
Security Reports (24)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 79.36.191.212
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS3269
- ISP
- TIM
DNS Information
- Reverse DNS
- host-79-36-191-212.retail.telecomitalia.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 24
- First Reported
- 26 May 2026
- Last Reported
- 8 Jun 2026, 20:49
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS3269
TIM
IT
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
74
Total IPs Monitored
964
Total Reports
13
Reports per IP
Network Context
This IP address belongs to TIM (AS3269), which manages 74 IP addresses in our monitoring system. Out of these, 964 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,728 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
24
avg: 23
=
Network Comparison
Compared against 114 IPs in ASN 3269
Threat Level
8/10
network avg: 4.9
++
Total Reports
24
network avg: 10
++
Network TIM has overall threat level 2/10
Geographic Comparison
Compared against 1,034 IPs in IT
Threat Level
8/10
country avg: 4.4
++
Total Reports
24
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
9 reports
Daily Average
0.8
reports/day
Most Active
Tuesday
11 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
24
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.5/10
Avg Threat
81%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
79.3.96.178
10/10
Confidence
99%
Reports
52
Location
IT
IT
79.55.224.44
10/10
Confidence
99%
Reports
36
Location
IT
IT
5.99.196.202
10/10
Confidence
99%
Reports
19
Location
IT
IT
95.231.249.182
10/10
Confidence
99%
Reports
19
Location
IT
IT
95.239.158.82
8/10
Confidence
95%
Reports
14
Location
IT
IT
31.195.210.101
10/10
Confidence
94%
Reports
62
Location
IT
IT
79.19.185.251
10/10
Confidence
94%
Reports
35
Location
IT
IT
95.250.241.71
10/10
Confidence
93%
Reports
10
Location
IT
IT
95.240.192.149
8/10
Confidence
87%
Reports
67
Location
IT
IT
79.6.181.193
10/10
Confidence
87%
Reports
8
Location
IT
IT
188.15.251.43
8/10
Confidence
77%
Reports
11
Location
IT
IT
79.6.181.195
10/10
Confidence
75%
Reports
62
Location
IT
IT
79.36.240.89
10/10
Confidence
74%
Reports
11
Location
IT
IT
95.235.240.74
8/10
Confidence
71%
Reports
25
Location
IT
IT
94.85.241.161
10/10
Confidence
70%
Reports
110
Location
IT
IT
85.47.236.93
10/10
Confidence
68%
Reports
134
Location
IT
IT
95.244.167.178
10/10
Confidence
64%
Reports
57
Location
IT
IT
87.27.155.236
8/10
Confidence
60%
Reports
10
Location
IT
IT
94.81.161.194
10/10
Confidence
59%
Reports
44
Location
IT
IT
194.243.156.222
10/10
Confidence
59%
Reports
36
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
81.57.15.243
10/10
Confidence
100%
Reports
57
ISP
Scaleway S.a.s.
212.66.99.54
8/10
Confidence
100%
Reports
50
ISP
Panservice s.a....
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
88.149.228.20
10/10
Confidence
99%
Reports
80
ISP
EOLO S.p.A.
79.3.96.178
10/10
Confidence
99%
Reports
52
ISP
TIM
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
5.99.196.202
10/10
Confidence
99%
Reports
19
ISP
TIM
95.231.249.182
10/10
Confidence
99%
Reports
19
ISP
TIM
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
151.60.216.153
8/10
Confidence
97%
Reports
32
ISP
Wind Tre S.p.A.
152.89.170.227
10/10
Confidence
97%
Reports
19
ISP
Lumanex Srl
81.29.234.67
10/10
Confidence
96%
Reports
49
ISP
Linkwireless srl
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
106.75.186.101
10/10
Confidence
97%
Reports
717
Location
CN
CN
106.75.164.40
10/10
Confidence
97%
Reports
712
Location
CN
CN
87.121.84.126
8/10
Confidence
97%
Reports
259
Location
US
US
87.121.84.80
10/10
Confidence
97%
Reports
210
Location
US
US
87.121.84.82
8/10
Confidence
97%
Reports
209
Location
US
US
87.121.84.127
8/10
Confidence
97%
Reports
195
Location
US
US
103.98.176.164
10/10
Confidence
97%
Reports
173
Location
ID
ID
87.121.84.119
8/10
Confidence
97%
Reports
162
Location
US
US
87.121.84.121
8/10
Confidence
97%
Reports
149
Location
US
US
103.88.76.27
10/10
Confidence
97%
Reports
131
Location
IN
IN
124.55.178.99
8/10
Confidence
97%
Reports
120
Location
KR
KR
185.100.212.141
10/10
Confidence
97%
Reports
118
Location
IN
IN
156.239.225.149
10/10
Confidence
97%
Reports
115
Location
SC
SC
87.121.84.125
8/10
Confidence
97%
Reports
112
Location
US
US
172.94.9.62
10/10
Confidence
97%
Reports
112
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203