Critical Alert
Security alert: 5.134.122.237 rated 10/10 based on 20 verified incidents.
Threat profile indicates sustained malicious activity with 96% confidence rating.
More threatening than 99% of monitored IPs
IP Address
5.134.122.237
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Italy
Location
Reevo S.p.A.
ASN 3242
20
Reports
Mixed
Data Source
Threat Categories
Hacking
19
Port Scan
10
WP XML-RPC Brute Force
10
Brute-Force
9
WP Login Brute Force
9
DDoS Attack
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 3242) with generally good reputation. The ISP Reevo S.p.A. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
67%
High Confidence
Confidence History
8. May 2026 - 11. May 2026
96%
Current
Stable
Trend
Security Reports (20)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force +2 | Honeypot x2 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x2 | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x10 | 75% |
Technical Details
Basic Information
- IP Address
- 5.134.122.237
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS3242
- ISP
- Reevo S.p.A.
DNS Information
- Reverse DNS
- 1.hostingxte.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 20
- First Reported
- 8 May 2026
- Last Reported
- 11 May 2026, 09:37
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 312,482 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
20
avg: 18
=
Network Comparison
Compared against 5 IPs in ASN 3242
Threat Level
10/10
network avg: 8.0
+
Total Reports
20
network avg: 10
++
Geographic Comparison
Compared against 1,592 IPs in IT
Threat Level
10/10
country avg: 5.3
++
Total Reports
20
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
11 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
19
Port Scan
10
WP XML-RPC Brute Force
10
Brute-Force
9
WP Login Brute Force
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
7.5/10
Avg Threat
56%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
5.99.196.202
10/10
Confidence
100%
Reports
52
ISP
TIM
2.38.104.24
8/10
Confidence
100%
Reports
25
ISP
Fastweb
151.95.211.132
10/10
Confidence
100%
Reports
24
ISP
Wind Tre S.p.A.
185.31.65.66
10/10
Confidence
100%
Reports
22
ISP
Netsons s.r.l.
185.180.182.154
10/10
Confidence
100%
Reports
20
ISP
Timenet SpA
185.56.171.119
8/10
Confidence
100%
Reports
19
ISP
Reevo S.p.A.
172.213.232.128
8/10
Confidence
100%
Reports
16
ISP
Microsoft Corpo...
81.29.234.67
10/10
Confidence
99%
Reports
76
ISP
Linkwireless srl
79.55.224.44
10/10
Confidence
99%
Reports
36
ISP
TIM
93.39.209.147
10/10
Confidence
99%
Reports
30
ISP
Fastweb
151.95.83.235
10/10
Confidence
99%
Reports
12
ISP
Wind Tre S.p.A.
2.32.201.235
8/10
Confidence
98%
Reports
22
ISP
Fastweb
93.48.24.181
10/10
Confidence
98%
Reports
20
ISP
Fastweb
93.63.237.36
10/10
Confidence
98%
Reports
16
ISP
Fastweb
95.255.158.96
10/10
Confidence
98%
Reports
14
ISP
TIM
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
96%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
185.91.127.85
10/10
Confidence
96%
Reports
921
Location
DE
DE
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
20.203.42.204
10/10
Confidence
96%
Reports
595
Location
AE
AE
141.98.11.117
8/10
Confidence
96%
Reports
554
Location
LT
LT
5.61.209.43
8/10
Confidence
96%
Reports
416
Location
SC
SC
68.178.160.25
8/10
Confidence
96%
Reports
324
Location
US
US
168.63.79.147
8/10
Confidence
96%
Reports
317
Location
IE
IE
94.154.43.243
8/10
Confidence
96%
Reports
307
Location
NL
NL
20.153.140.50
8/10
Confidence
96%
Reports
301
Location
SG
SG
176.65.139.8
8/10
Confidence
96%
Reports
268
Location
DE
DE
176.65.139.140
8/10
Confidence
96%
Reports
266
Location
DE
DE
195.178.110.100
10/10
Confidence
96%
Reports
250
Location
BG
BG
89.42.231.200
10/10
Confidence
96%
Reports
231
Location
NL
NL
64.89.161.198
6/10
Confidence
96%
Reports
230
Location
US
US