IP Address

109.197.185.156

IPv4 Public
PL PL
AS198277
Mag Firma Handlowa
4 Reports
This IP is under Observation Suspicious activity detected - monitor closely
7/10 Threat
52% Confidence
4 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
PL
Poland Location
Mag Firma Handlowa ASN 198277
4 Reports
Honeypot Data Source

Elevated Risk

Elevated threat level 7/10 for IP 109.197.185.156 from 4 reported incidents.

Behavioral profile indicates cyber threat activity with 52% confidence.

More threatening than 88% of monitored IPs

Threat Categories

Fraud VoIP 4

Technical Details

VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.

Recommended Mitigations

Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.

Behavioral Analysis

Activity Pattern: Recent Spike

Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.

First Observed 22. October 2026
Last Activity 25. October 2026
Recent (7 days) 4 incidents

Reputable Network

This IP is hosted on a network (ASN 198277) with generally good reputation. The ISP Mag Firma Handlowa maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Enhanced monitoring recommended. Review logs for interactions with this IP.

Immediate monitoring recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 7/10 High
High
Activity Frequency 3/10 Low
Confidence Score 50% Medium Confidence

Confidence History

22. Oct 2026 - 25. Oct 2026
52% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (4)

Date Categories Source Confidence
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%
Fraud VoIP Honeypot 75%

Technical Details

Basic Information

IP Address
109.197.185.156
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
PL PL
ASN
AS198277
ISP
Mag Firma Handlowa

DNS Information

Reverse DNS
109-197-185-156.net.tylda.net
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
4
First Reported
26 Oct 2026
Last Reported
25 Oct 2026, 20:36

Comparative Analysis

How this IP compares to others in our threat intelligence database

88 %

Global Threat Ranking

This IP is more threatening than 88% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 1,265,091 reported IPs worldwide

Threat Level 7/10 avg: 6.0 +
Total Reports 4 avg: 7 -

Network Comparison

Compared against 6 IPs in ASN 198277

Threat Level 7/10 network avg: 5.3 +
Total Reports 4 network avg: 2 ++

Geographic Comparison

Compared against 10,985 IPs in PL

Threat Level 7/10 country avg: 5.6 +
Total Reports 4 country avg: 5 =
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

1,152,420 threat incidents tracked globally • Last 24h: 31,257 Logs

FEED

Top Threat Sources

  1. 01
    BR
    Brazil BR
    257,590 22.4%
  2. 02
    US
    United States US
    195,577 17%
  3. 03
    IN
    India IN
    99,483 8.6%
  4. 04
    CN
    China CN
    48,822 4.2%
  5. 05
    AR
    Argentina AR
    41,671 3.6%
  6. 06
    SC
    SC SC
    29,369 2.5%
  7. 07
    MX
    Mexico MX
    27,126 2.4%
  8. 08
    RU
    Russia RU
    25,990 2.3%
  9. 09
    CO
    Colombia CO
    23,937 2.1%
  10. 10
    DE
    Germany DE
    21,717 1.9%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same country with similar threat profiles.

15 Related IPs
9.5/10 Avg Threat
91% Avg Confidence
14 High Threat
High-risk network: Majority of related IPs are flagged
57.128.222.79 10/10
Confidence 100%
Reports 60
ISP OVH SAS
26 Oct 2026
57.128.239.181 10/10
Confidence 96%
Reports 24
ISP OVH SAS
23 Oct 2026
45.141.215.52 8/10
Confidence 95%
Reports 133
ISP 1337 Services GmbH
26 Oct 2026
87.251.64.125 10/10
Confidence 94%
Reports 148
ISP ISAEV Igor
24 Oct 2026
70.34.252.163 10/10
Confidence 94%
Reports 53
ISP The Constant Co...
25 Oct 2026
193.34.212.123 10/10
Confidence 93%
Reports 3,542
ISP MEVSPACE sp. z ...
26 Oct 2026
77.83.101.41 10/10
Confidence 93%
Reports 1,370
ISP Atman Sp. z o.o.
26 Oct 2026
85.221.152.77 10/10
Confidence 91%
Reports 12
ISP INEA sp. z o.o.
22 Oct 2026
109.243.0.231 8/10
Confidence 91%
Reports 11
ISP Play
16 Oct 2026
145.239.87.55 6/10
Confidence 89%
Reports 17
ISP OVH SAS
19 Oct 2026
145.239.89.124 10/10
Confidence 89%
Reports 16
ISP OVH SAS
26 Oct 2026
188.125.33.54 10/10
Confidence 87%
Reports 127
ISP Polkomtel Sp. z...
26 Oct 2026
45.128.38.236 10/10
Confidence 86%
Reports 13
ISP M247 Europe SRL
23 Oct 2026
91.228.8.120 10/10
Confidence 86%
Reports 12
ISP Cheeloo J. Turc...
16 Oct 2026
91.228.8.19 10/10
Confidence 86%
Reports 12
ISP Cheeloo J. Turc...
16 Oct 2026

IPs with similar threat level and confidence scores.

15 Related IPs
10/10 Avg Threat
52% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
43.229.89.182 10/10
Confidence 52%
Reports 4
Location IN IN
23 Oct 2026
109.94.173.37 10/10
Confidence 52%
Reports 4
Location UZ UZ
24 Oct 2026
43.157.243.165 10/10
Confidence 52%
Reports 4
Location ID ID
25 Oct 2026
2803:8920:60fb:7000:513f:7add:fe0b:e20e 10/10
Confidence 52%
Reports 4
Location PY PY
23 Oct 2026
129.222.203.42 10/10
Confidence 52%
Reports 4
Location CO CO
25 Oct 2026
103.165.65.238 10/10
Confidence 52%
Reports 3
Location IN IN
26 Oct 2026
49.145.130.125 10/10
Confidence 52%
Reports 4
Location PH PH
24 Oct 2026
163.47.148.153 10/10
Confidence 52%
Reports 4
Location NP NP
22 Oct 2026
34.151.123.82 10/10
Confidence 52%
Reports 4
Location AU AU
22 Oct 2026
43.128.133.75 10/10
Confidence 52%
Reports 4
Location KR KR
24 Oct 2026
112.208.179.99 10/10
Confidence 52%
Reports 3
Location PH PH
26 Oct 2026
150.228.11.88 10/10
Confidence 52%
Reports 4
Location YE YE
21 Oct 2026
34.81.188.197 10/10
Confidence 52%
Reports 4
Location TW TW
20 Oct 2026
153.76.64.200 10/10
Confidence 52%
Reports 4
Location ID ID
23 Oct 2026
143.110.171.194 10/10
Confidence 52%
Reports 5
Location GB GB
19 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "109.197.185.156",
    "threat_level": 7,
    "confidence_score": 52,
    "total_reports": 4,
    "country_code": "PL",
    "isp_name": "Mag Firma Handlowa",
    "asn": "198277",
    "first_reported": "2026-10-26 19:44:12",
    "last_reported": "2026-10-25 20:36:34",
    "exported_at": "2026-10-26T22:53:56+01:00",
    "source": "https://reportedip.com/ip/109.197.185.156/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses