Moderate Risk
IP 194.21.16.9 presents moderate risk (5/10) with 2 security reports.
Some concerning behavior detected. Confidence: 35%.
More threatening than 46% of monitored IPs
IP Address
194.21.16.9
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Below Average Risk
Italy
Location
Retelit Digital Services ...
ASN 3302
2
Reports
Honeypot
Data Source
Threat Categories
Bad Web Bot
2
WP Content Scraping
2
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
29. August 2026
Last Activity
29. August 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 3302, operated by Retelit Digital Services S.p.A.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Standard monitoring recommended. Apply conditional access controls as needed.
Long-term blocking recommended.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
4/10
Low
Confidence Score
27%
Medium Confidence
Confidence History
29. Aug 2026
35%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot WP Content Scraping | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 194.21.16.9
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
IT
- ASN
- AS3302
- ISP
- Retelit Digital Services S.p.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 29 Aug 2026
- Last Reported
- 29 Aug 2026, 12:56
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS3302
Retelit Digital Services S.p.A.
IT
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
3
Total IPs Monitored
25
Total Reports
8.3
Reports per IP
Network Context
This IP address belongs to Retelit Digital Services S.p.A. (AS3302), which manages 3 IP addresses in our monitoring system. Out of these, 25 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
46
%
Global Threat Ranking
This IP is more threatening than 46% of all IPs in our database.
Below Average ThreatGlobal Comparison
Compared against 767,802 reported IPs worldwide
Threat Level
5/10
avg: 5.8
=
Total Reports
2
avg: 9
--
Network Comparison
Compared against 19 IPs in ASN 3302
Threat Level
5/10
network avg: 5.9
-
Total Reports
2
network avg: 4
--
Network Retelit Digital Services S.p.A. has overall threat level 6/10
Geographic Comparison
Compared against 7,838 IPs in IT
Threat Level
5/10
country avg: 5.3
=
Total Reports
2
country avg: 3
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Aug 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Saturday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
4/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
2
WP Content Scraping
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
698,370 threat incidents tracked globally • Last 24h: 23,162 Logs
FEED
Top Threat Sources
-
01
United States134,954 19.3% -
02
Brazil109,430 15.7%
-
03
India75,806 10.9%
-
04
China43,125 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,474 2.4%
-
07
Argentina16,068 2.3%
-
08
Germany15,825 2.3%
-
09
Pakistan15,214 2.2%
-
10
Colombia15,077 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
5.9/10
Avg Threat
32%
Avg Confidence
6
High Threat
Elevated risk: Multiple related IPs are flagged
194.153.198.230
10/10
Confidence
100%
Reports
57
Location
IT
IT
77.246.14.6
10/10
Confidence
51%
Reports
4
Location
IT
IT
213.203.165.138
6/10
Confidence
40%
Reports
3
Location
IT
IT
194.153.195.67
5/10
Confidence
35%
Reports
2
Location
IT
IT
82.193.25.160
7/10
Confidence
30%
Reports
1
Location
IT
IT
94.138.33.174
7/10
Confidence
30%
Reports
1
Location
IT
IT
194.244.59.3
10/10
Confidence
28%
Reports
3
Location
IT
IT
195.110.157.146
5/10
Confidence
25%
Reports
1
Location
IT
IT
84.253.143.114
5/10
Confidence
25%
Reports
1
Location
IT
IT
62.94.163.0
5/10
Confidence
25%
Reports
1
Location
IT
IT
212.110.17.8
7/10
Confidence
24%
Reports
1
Location
IT
IT
62.94.177.168
6/10
Confidence
24%
Reports
1
Location
IT
IT
213.198.138.32
4/10
Confidence
23%
Reports
1
Location
IT
IT
213.198.138.217
4/10
Confidence
23%
Reports
1
Location
IT
IT
212.90.22.45
4/10
Confidence
23%
Reports
1
Location
IT
IT
213.198.142.237
4/10
Confidence
23%
Reports
1
Location
IT
IT
212.90.21.81
4/10
Confidence
23%
Reports
1
Location
IT
IT
213.198.128.178
4/10
Confidence
23%
Reports
1
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
194.153.198.230
10/10
Confidence
100%
Reports
57
ISP
Retelit Digital...
5.99.196.202
10/10
Confidence
100%
Reports
55
ISP
TIM
2.38.104.24
8/10
Confidence
100%
Reports
25
ISP
Fastweb
151.95.211.132
10/10
Confidence
100%
Reports
24
ISP
Wind Tre S.p.A.
212.66.100.243
8/10
Confidence
100%
Reports
23
ISP
Panservice s.a....
185.31.65.66
10/10
Confidence
100%
Reports
22
ISP
Netsons s.r.l.
4.232.151.198
8/10
Confidence
100%
Reports
21
ISP
Microsoft Corpo...
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
185.56.171.119
8/10
Confidence
100%
Reports
19
ISP
Reevo S.p.A.
95.255.158.96
10/10
Confidence
100%
Reports
19
ISP
TIM
172.213.232.128
8/10
Confidence
100%
Reports
16
ISP
Microsoft Corpo...
4.232.147.36
8/10
Confidence
100%
Reports
15
ISP
Microsoft Corpo...
83.98.89.47
8/10
Confidence
100%
Reports
13
ISP
Opnet Srl
81.56.199.28
8/10
Confidence
100%
Reports
13
ISP
Scaleway SAS
81.29.234.67
10/10
Confidence
99%
Reports
76
ISP
Linkwireless srl
IPs with similar threat level and confidence scores.
15
Related IPs
7.7/10
Avg Threat
35%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
171.25.193.131
10/10
Confidence
35%
Reports
32
Location
SE
SE
84.242.41.234
8/10
Confidence
35%
Reports
31
Location
OM
OM
143.198.238.84
8/10
Confidence
35%
Reports
30
Location
US
US
114.119.133.204
8/10
Confidence
35%
Reports
28
Location
SG
SG
162.144.234.153
8/10
Confidence
35%
Reports
22
Location
US
US
38.159.226.38
8/10
Confidence
35%
Reports
15
Location
DO
DO
45.84.185.71
8/10
Confidence
35%
Reports
13
Location
BG
BG
103.91.72.200
7/10
Confidence
35%
Reports
12
Location
IN
IN
103.91.72.226
7/10
Confidence
35%
Reports
12
Location
IN
IN
103.91.72.198
7/10
Confidence
35%
Reports
11
Location
IN
IN
103.91.72.207
7/10
Confidence
35%
Reports
11
Location
IN
IN
103.91.72.237
7/10
Confidence
35%
Reports
11
Location
IN
IN
2a03:2880:f814:9::
8/10
Confidence
35%
Reports
11
Location
US
US
103.91.72.236
7/10
Confidence
35%
Reports
10
Location
IN
IN
185.209.196.248
7/10
Confidence
35%
Reports
10
Location
DE
DE
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2