IP Address

109.198.115.126

IPv4 Public
RU RU
AS35815
LLC Cifrovie Seti Urala
17 Reports
This IP is under Observation Suspicious activity detected - monitor closely
10/10 Threat
24% Confidence
17 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Top 5% Most Dangerous
RU
RU Location
LLC Cifrovie Seti Urala ASN 35815
17 Reports
Honeypot Data Source

Critical Alert

Security alert: 109.198.115.126 rated 10/10 based on 17 verified incidents.

Threat profile indicates sustained malicious activity with 24% confidence rating.

More threatening than 95% of monitored IPs

Threat Categories

Exploited Host 17
Hacking 4

Technical Details

This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.

Recommended Mitigations

Block the IP and consider notifying the hosting provider or system owner about the compromise.

Reputable Network

This IP is hosted on a network (ASN 35815) with generally good reputation. The ISP LLC Cifrovie Seti Urala maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement immediate countermeasures. Well-resourced threat actor identified.

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 10/10 Critical
Critical
Activity Frequency 0/10 Inactive
Confidence Score 12% Low Confidence

Confidence History

21. Jan 2026 - 20. Aug 2026
24% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (17)

Date Categories Source Confidence
Exploited Host Hacking Honeypot x2 75%
Hacking Exploited Host Honeypot x2 75%
Exploited Host Hacking Honeypot x2 75%
Hacking Exploited Host Honeypot x2 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
Exploited Host Honeypot 75%
10 of 17 shown

Technical Details

Basic Information

IP Address
109.198.115.126
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
RU RU
ASN
AS35815
ISP
LLC Cifrovie Seti Urala

DNS Information

Reverse DNS
126.115.198.109.convex-tagil.ru
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
17
First Reported
21 Jan 2026
Last Reported
20 Aug 2026, 08:48

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS35815
LLC Cifrovie Seti Urala
RU RU

Network Threat Assessment

2/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

4
Total IPs Monitored
33
Total Reports
8.3
Reports per IP

Network Context

This IP address belongs to LLC Cifrovie Seti Urala (AS35815), which manages 4 IP addresses in our monitoring system. Out of these, 33 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

95 %

Global Threat Ranking

This IP is more threatening than 95% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 1,343,241 reported IPs worldwide

Threat Level 10/10 avg: 6.0 ++
Total Reports 17 avg: 7 ++

Network Comparison

Compared against 17 IPs in ASN 35815

Threat Level 10/10 network avg: 6.1 ++
Total Reports 17 network avg: 3 ++
Network LLC Cifrovie Seti Urala has overall threat level 2/10

Geographic Comparison

Compared against 27,261 IPs in RU

Threat Level 10/10 country avg: 5.9 ++
Total Reports 17 country avg: 6 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

1,224,509 threat incidents tracked globally • Last 24h: 25,055 Logs

FEED

Top Threat Sources

  1. 01
    BR
    Brazil BR
    261,470 21.4%
  2. 02
    US
    United States US
    211,326 17.3%
  3. 03
    IN
    India IN
    103,848 8.5%
  4. 04
    CN
    China CN
    51,882 4.2%
  5. 05
    AR
    Argentina AR
    42,506 3.5%
  6. 06
    SC
    SC SC
    29,469 2.4%
  7. 07
    MX
    Mexico MX
    28,037 2.3%
  8. 08
    RU
    Russia RU THIS IP
    27,261 2.2%
  9. 09
    DE
    Germany DE
    25,251 2.1%
  10. 10
    CO
    Colombia CO
    24,311 2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same country with similar threat profiles.

15 Related IPs
9.2/10 Avg Threat
95% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
80.66.66.66 8/10
Confidence 100%
Reports 29
ISP Soldatov Alexey...
9 Nov 2026
94.180.139.162 10/10
Confidence 97%
Reports 25
ISP JSC ER-Telecom ...
6 Nov 2026
185.114.245.170 8/10
Confidence 96%
Reports 25
ISP Jsc timeweb
1 Nov 2026
176.120.22.61 10/10
Confidence 96%
Reports 21
ISP Proton66 OOO
9 Nov 2026
194.147.90.128 8/10
Confidence 96%
Reports 15
ISP PR Obrada Podat...
2 Nov 2026
87.251.64.131 10/10
Confidence 94%
Reports 630
ISP Shesternin Vlad...
11 Nov 2026
87.251.64.126 8/10
Confidence 94%
Reports 399
ISP Shesternin Vlad...
11 Nov 2026
87.251.64.128 10/10
Confidence 94%
Reports 380
ISP Shesternin Vlad...
11 Nov 2026
87.251.64.132 10/10
Confidence 94%
Reports 375
ISP Shesternin Vlad...
11 Nov 2026
87.251.64.127 8/10
Confidence 94%
Reports 358
ISP Shesternin Vlad...
11 Nov 2026
82.204.185.138 10/10
Confidence 94%
Reports 283
ISP MTS PJSC
11 Nov 2026
77.91.71.43 10/10
Confidence 94%
Reports 234
ISP Alferov Aleksey...
10 Nov 2026
31.184.195.244 8/10
Confidence 94%
Reports 128
ISP Petersburg Inte...
10 Nov 2026
45.91.64.10 10/10
Confidence 94%
Reports 121
ISP JSC Buduschee
11 Nov 2026
176.120.22.179 10/10
Confidence 94%
Reports 75
ISP Proton66 OOO
4 Nov 2026

IPs with similar threat level and confidence scores.

15 Related IPs
10/10 Avg Threat
24% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
154.57.221.140 10/10
Confidence 24%
Reports 3
Location PK PK
20 Oct 2026
34.87.54.248 10/10
Confidence 24%
Reports 3
Location SG SG
20 Oct 2026
35.204.198.10 10/10
Confidence 24%
Reports 3
Location NL NL
20 Oct 2026
23.234.78.109 10/10
Confidence 24%
Reports 3
Location US US
20 Oct 2026
49.205.149.176 10/10
Confidence 24%
Reports 3
Location IN IN
20 Oct 2026
131.161.79.150 10/10
Confidence 24%
Reports 3
Location BR BR
19 Oct 2026
217.145.228.122 10/10
Confidence 24%
Reports 3
Location IQ IQ
21 Oct 2026
182.242.168.214 10/10
Confidence 24%
Reports 3
Location CN CN
16 Oct 2026
2607:fb90:2755:dbf8:697:4713:4ea9:ef1e 10/10
Confidence 24%
Reports 3
Location US US
20 Oct 2026
34.7.186.185 10/10
Confidence 24%
Reports 3
Location NL NL
16 Oct 2026
136.66.88.15 10/10
Confidence 24%
Reports 4
Location US US
16 Oct 2026
34.139.73.205 10/10
Confidence 24%
Reports 3
Location US US
15 Oct 2026
136.107.177.17 10/10
Confidence 24%
Reports 3
Location US US
15 Oct 2026
153.67.85.106 10/10
Confidence 24%
Reports 3
Location MG MG
19 Oct 2026
103.100.175.83 10/10
Confidence 24%
Reports 3
Location ID ID
16 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "109.198.115.126",
    "threat_level": 10,
    "confidence_score": 24,
    "total_reports": 17,
    "country_code": "RU",
    "isp_name": "LLC Cifrovie Seti Urala",
    "asn": "35815",
    "first_reported": "2026-01-21 21:39:58",
    "last_reported": "2026-08-20 08:48:25",
    "exported_at": "2026-11-11T15:43:07+01:00",
    "source": "https://reportedip.com/ip/109.198.115.126/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses