Extreme Threat
IP 109.236.48.133 classified at threat level 10/10 with 8 documented attacks.
Advanced threat indicators confirmed with 10% certainty.
More threatening than 95% of monitored IPs
IP Address
109.236.48.133
IPv4
Public
TR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Türkiye
Location
CAFER ESER
ASN 215391
8
Reports
Honeypot
Data Source
Threat Categories
SSH
8
Hacking
3
Brute-Force
2
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
High-Risk Network Association
This IP belongs to a network (ASN 215391) with elevated threat levels. The ISP CAFER ESER hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
3%
Low Confidence
Confidence History
13. Jun 2026 - 29. Jun 2026
10%
Current
Stable
Trend
Security Reports (8)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 109.236.48.133
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
TR
- ASN
- AS215391
- ISP
- CAFER ESER
DNS Information
- Reverse DNS
- hostivon.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 8
- First Reported
- 13 Jun 2026
- Last Reported
- 29 Jun 2026, 17:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS215391
CAFER ESER
TR
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
5
Total Reports
5
Reports per IP
Network Context
This IP address belongs to CAFER ESER (AS215391), which manages 1 IP addresses in our monitoring system. Out of these, 5 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
95
%
Global Threat Ranking
This IP is more threatening than 95% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,352,021 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
8
avg: 7
+
Network Comparison
Compared against 8 IPs in ASN 215391
Threat Level
10/10
network avg: 7.8
+
Total Reports
8
network avg: 32
--
Network CAFER ESER has overall threat level 8/10
Geographic Comparison
Compared against 12,765 IPs in TR
Threat Level
10/10
country avg: 7.7
+
Total Reports
8
country avg: 7
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
8
Hacking
3
Brute-Force
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,232,307 threat incidents tracked globally • Last 24h: 20,723 Logs
FEED
Top Threat Sources
-
01
Brazil261,719 21.2% -
02
United States213,607 17.3% -
03
India104,158 8.5% -
04
China52,534 4.3% -
05
Argentina42,605 3.5% -
06
SC29,485 2.4% -
07
Mexico28,148 2.3% -
08
Russia27,411 2.2% -
09
Germany25,867 2.1% -
10
Colombia24,359 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
7
Related IPs
7.4/10
Avg Threat
31%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
109.236.48.223
10/10
Confidence
94%
Reports
228
Location
TR
TR
104.238.23.142
7/10
Confidence
28%
Reports
1
Location
TR
TR
216.173.108.137
6/10
Confidence
27%
Reports
9
Location
TR
TR
104.238.23.141
7/10
Confidence
24%
Reports
1
Location
TR
TR
109.236.48.208
8/10
Confidence
23%
Reports
5
Location
TR
TR
217.60.254.2
6/10
Confidence
23%
Reports
1
Location
TR
TR
109.236.48.121
8/10
Confidence
0%
Reports
5
Location
TR
TR
IPs from the same subnet range, likely same network segment.
3
Related IPs
8.7/10
Avg Threat
39%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.8/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.226.93.242
7/10
Confidence
100%
Reports
131
ISP
Big Core LLC
193.187.110.159
10/10
Confidence
96%
Reports
323
ISP
FAST ZONE IT
46.29.26.163
10/10
Confidence
94%
Reports
1,811
ISP
M/S ROBI TRADERS
109.236.48.223
10/10
Confidence
94%
Reports
228
ISP
CAFER ESER
193.187.110.160
10/10
Confidence
94%
Reports
99
ISP
FAST ZONE IT
193.35.155.58
10/10
Confidence
94%
Reports
22
ISP
Data Home Yazil...
193.35.155.43
10/10
Confidence
94%
Reports
21
ISP
Data Home Yazil...
213.250.151.217
10/10
Confidence
94%
Reports
19
ISP
HUAWEI CLOUDS
193.35.155.24
10/10
Confidence
94%
Reports
19
ISP
Data Home Yazil...
193.35.155.115
10/10
Confidence
94%
Reports
19
ISP
Data Home Yazil...
193.35.155.81
10/10
Confidence
94%
Reports
18
ISP
Data Home Yazil...
193.35.155.107
10/10
Confidence
94%
Reports
18
ISP
Data Home Yazil...
193.35.155.103
10/10
Confidence
94%
Reports
16
ISP
Data Home Yazil...
193.35.155.10
10/10
Confidence
94%
Reports
16
ISP
Data Home Yazil...
193.35.155.112
10/10
Confidence
94%
Reports
14
ISP
Data Home Yazil...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
10%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.156.98.72
10/10
Confidence
10%
Reports
4
Location
BE
BE
34.16.249.132
10/10
Confidence
10%
Reports
3
Location
US
US
34.23.168.217
10/10
Confidence
10%
Reports
4
Location
US
US
35.187.127.227
10/10
Confidence
10%
Reports
3
Location
BE
BE
8.228.106.194
10/10
Confidence
10%
Reports
4
Location
US
US
34.76.163.71
10/10
Confidence
10%
Reports
3
Location
BE
BE
34.78.89.35
10/10
Confidence
10%
Reports
4
Location
BE
BE
125.166.9.51
10/10
Confidence
10%
Reports
5
Location
ID
ID
34.10.27.238
10/10
Confidence
10%
Reports
3
Location
US
US
34.50.163.196
10/10
Confidence
10%
Reports
6
Location
US
US
34.101.234.26
10/10
Confidence
10%
Reports
6
Location
ID
ID
34.12.136.201
10/10
Confidence
10%
Reports
3
Location
NL
NL
34.38.153.155
10/10
Confidence
10%
Reports
4
Location
BE
BE
34.74.27.247
10/10
Confidence
10%
Reports
3
Location
US
US
34.10.14.81
10/10
Confidence
10%
Reports
4
Location
US
US