Critical Alert
Security alert: 2.36.216.65 rated 10/10 based on 4 verified incidents.
Threat profile indicates sustained malicious activity with 55% confidence rating.
More threatening than 99% of monitored IPs
IP Address
2.36.216.65
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Italy
Location
Fastweb
ASN 30722
4
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
3
Hacking
2
Web App Attack
1
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
13. November 2026
Last Activity
14. November 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 30722) with generally good reputation. The ISP Fastweb maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
55%
High Confidence
Confidence History
13. Nov 2026 - 14. Nov 2026
55%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host | Honeypot | 75% |
| Web App Attack | Honeypot | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 2.36.216.65
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS30722
- ISP
- Fastweb
DNS Information
- Reverse DNS
- net-2-36-216-65.cust.vodafonedsl.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 4
- First Reported
- 13 Nov 2026
- Last Reported
- 14 Nov 2026, 02:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS30722
Fastweb
IT
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
40
Total IPs Monitored
328
Total Reports
8.2
Reports per IP
Network Context
This IP address belongs to Fastweb (AS30722), which manages 40 IP addresses in our monitoring system. Out of these, 328 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,352,021 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
4
avg: 7
-
Network Comparison
Compared against 2,494 IPs in ASN 30722
Threat Level
10/10
network avg: 5.3
++
Total Reports
4
network avg: 1
++
Network Fastweb has overall threat level 3/10
Geographic Comparison
Compared against 19,247 IPs in IT
Threat Level
10/10
country avg: 5.4
++
Total Reports
4
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
13 Nov 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Friday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
3
Hacking
2
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,232,307 threat incidents tracked globally • Last 24h: 20,723 Logs
FEED
Top Threat Sources
-
01
Brazil261,719 21.2% -
02
United States213,607 17.3% -
03
India104,158 8.5% -
04
China52,534 4.3% -
05
Argentina42,605 3.5% -
06
SC29,485 2.4% -
07
Mexico28,148 2.3% -
08
Russia27,411 2.2% -
09
Germany25,867 2.1% -
10
Colombia24,359 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
43%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
2.32.205.184
10/10
Confidence
94%
Reports
18
Location
IT
IT
5.89.75.194
10/10
Confidence
87%
Reports
57
Location
IT
IT
188.152.238.126
8/10
Confidence
80%
Reports
43
Location
IT
IT
93.149.168.76
10/10
Confidence
45%
Reports
4
Location
IT
IT
5.88.119.21
8/10
Confidence
44%
Reports
16
Location
IT
IT
5.91.216.32
10/10
Confidence
40%
Reports
29
Location
IT
IT
93.151.219.205
10/10
Confidence
39%
Reports
4
Location
IT
IT
93.149.168.231
10/10
Confidence
38%
Reports
12
Location
IT
IT
93.150.82.144
10/10
Confidence
37%
Reports
5
Location
IT
IT
93.149.171.50
10/10
Confidence
37%
Reports
4
Location
IT
IT
93.148.111.53
7/10
Confidence
37%
Reports
4
Location
IT
IT
5.95.86.29
10/10
Confidence
37%
Reports
3
Location
IT
IT
93.148.92.210
4/10
Confidence
35%
Reports
2
Location
IT
IT
2.38.141.146
7/10
Confidence
32%
Reports
2
Location
IT
IT
5.95.62.31
8/10
Confidence
31%
Reports
24
Location
IT
IT
93.70.83.228
8/10
Confidence
31%
Reports
8
Location
IT
IT
37.119.96.118
6/10
Confidence
31%
Reports
4
Location
IT
IT
93.148.93.98
5/10
Confidence
31%
Reports
2
Location
IT
IT
37.159.229.75
10/10
Confidence
30%
Reports
5
Location
IT
IT
2.42.180.149
8/10
Confidence
30%
Reports
4
Location
IT
IT
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
24%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
90%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
89.34.236.135
8/10
Confidence
94%
Reports
337
ISP
NetJoin Srl
66.245.207.165
10/10
Confidence
94%
Reports
60
ISP
The Constant Co...
151.59.121.163
10/10
Confidence
94%
Reports
58
ISP
Wind Tre S.p.A.
194.116.8.149
10/10
Confidence
94%
Reports
43
ISP
B.B.Bell SPA
151.59.132.222
10/10
Confidence
94%
Reports
36
ISP
Wind Tre S.p.A.
151.59.2.66
10/10
Confidence
94%
Reports
32
ISP
Wind Tre S.p.A.
2.32.205.184
10/10
Confidence
94%
Reports
18
ISP
Fastweb
93.48.225.80
10/10
Confidence
92%
Reports
345
ISP
Fastweb
57.131.32.79
10/10
Confidence
91%
Reports
12
ISP
OVH SAS
2a05:4140:54:0:f0a3:bed4:8f61:cc84
8/10
Confidence
88%
Reports
11
ISP
Lumanex Srl
5.89.75.194
10/10
Confidence
87%
Reports
57
ISP
Fastweb
87.11.176.157
10/10
Confidence
86%
Reports
12
ISP
TIM
95.229.164.97
10/10
Confidence
84%
Reports
11
ISP
TIM
83.140.108.177
10/10
Confidence
83%
Reports
19
ISP
GlobalConnect AB
95.255.158.96
10/10
Confidence
82%
Reports
47
ISP
TIM
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
55%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
20.48.89.150
10/10
Confidence
55%
Reports
4
Location
JP
JP
43.155.252.120
10/10
Confidence
55%
Reports
4
Location
KR
KR
34.32.83.206
10/10
Confidence
55%
Reports
4
Location
DE
DE
34.97.50.203
10/10
Confidence
55%
Reports
4
Location
JP
JP
34.79.25.192
10/10
Confidence
55%
Reports
4
Location
BE
BE
190.49.87.173
10/10
Confidence
55%
Reports
4
Location
AR
AR
35.206.141.112
10/10
Confidence
55%
Reports
4
Location
BE
BE
212.28.179.14
10/10
Confidence
55%
Reports
4
Location
US
US
188.132.237.136
10/10
Confidence
55%
Reports
4
Location
TR
TR
8.234.226.143
10/10
Confidence
55%
Reports
4
Location
US
US
43.163.8.247
10/10
Confidence
55%
Reports
4
Location
SG
SG
35.198.10.46
10/10
Confidence
55%
Reports
4
Location
BR
BR
168.144.61.64
10/10
Confidence
55%
Reports
5
Location
US
US
128.127.113.254
10/10
Confidence
55%
Reports
7
Location
RO
RO
34.91.39.229
10/10
Confidence
55%
Reports
7
Location
NL
NL