Critical Alert
Security alert: 79.31.231.20 rated 10/10 based on 4 verified incidents.
Threat profile indicates sustained malicious activity with 59% confidence rating.
More threatening than 99% of monitored IPs
IP Address
79.31.231.20
IPv4
Public
IT
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Italy
Location
TIM
ASN 3269
4
Reports
Mixed
Data Source
Threat Categories
Brute-Force
4
Web App Attack
4
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
16. October 2026
Last Activity
16. October 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 3269) with generally good reputation. The ISP TIM maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
59%
High Confidence
Confidence History
16. Oct 2026
59%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 79.31.231.20
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IT
- ASN
- AS3269
- ISP
- TIM
DNS Information
- Reverse DNS
- host-79-31-231-20.retail.telecomitalia.it
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 4
- First Reported
- 18 Oct 2026
- Last Reported
- 16 Oct 2026, 16:57
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS3269
TIM
IT
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
74
Total IPs Monitored
964
Total Reports
13
Reports per IP
Network Context
This IP address belongs to TIM (AS3269), which manages 74 IP addresses in our monitoring system. Out of these, 964 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,001,470 reported IPs worldwide
Threat Level
10/10
avg: 6.2
++
Total Reports
4
avg: 8
--
Network Comparison
Compared against 2,449 IPs in ASN 3269
Threat Level
10/10
network avg: 5.3
++
Total Reports
4
network avg: 2
++
Network TIM has overall threat level 2/10
Geographic Comparison
Compared against 11,929 IPs in IT
Threat Level
10/10
country avg: 5.5
++
Total Reports
4
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
16 Oct 2026
4 reports
Daily Average
0.1
reports/day
Most Active
Friday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
4
Web App Attack
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 16:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
913,153 threat incidents tracked globally • Last 24h: 217,415 Logs
FEED
Top Threat Sources
-
01
United States180,511 19.8% -
02
Brazil156,749 17.2%
-
03
India94,387 10.3%
-
04
China47,770 5.2%
-
05
SC29,341 3.2%
-
06
Argentina24,453 2.7%
-
07
Germany20,032 2.2%
-
08
Pakistan19,388 2.1%
-
09
Netherlands18,823 2.1%
-
10
Colombia18,251 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
61%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
94.88.180.210
10/10
Confidence
94%
Reports
581
Location
IT
IT
79.3.96.178
10/10
Confidence
85%
Reports
116
Location
IT
IT
95.255.158.96
10/10
Confidence
84%
Reports
25
Location
IT
IT
95.234.52.241
10/10
Confidence
82%
Reports
13
Location
IT
IT
5.99.196.202
10/10
Confidence
73%
Reports
62
Location
IT
IT
95.230.218.76
10/10
Confidence
73%
Reports
7
Location
IT
IT
79.51.140.129
8/10
Confidence
70%
Reports
8
Location
IT
IT
79.57.94.57
10/10
Confidence
63%
Reports
12
Location
IT
IT
82.190.250.190
10/10
Confidence
58%
Reports
5
Location
IT
IT
79.46.60.103
10/10
Confidence
56%
Reports
10
Location
IT
IT
94.85.241.161
10/10
Confidence
54%
Reports
114
Location
IT
IT
95.249.80.176
10/10
Confidence
54%
Reports
4
Location
IT
IT
79.8.46.135
10/10
Confidence
53%
Reports
5
Location
IT
IT
87.14.214.243
6/10
Confidence
51%
Reports
4
Location
IT
IT
31.199.224.56
10/10
Confidence
46%
Reports
53
Location
IT
IT
79.40.68.25
10/10
Confidence
46%
Reports
4
Location
IT
IT
82.62.194.59
6/10
Confidence
44%
Reports
4
Location
IT
IT
79.21.82.117
6/10
Confidence
44%
Reports
3
Location
IT
IT
95.247.190.158
6/10
Confidence
44%
Reports
3
Location
IT
IT
79.20.145.205
6/10
Confidence
42%
Reports
3
Location
IT
IT
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
212.112.92.29
10/10
Confidence
97%
Reports
63
ISP
CriticalCase s.r.l
87.241.44.37
10/10
Confidence
96%
Reports
545
ISP
COLT Technology...
93.42.213.29
10/10
Confidence
96%
Reports
183
ISP
Fastweb
101.56.198.207
8/10
Confidence
96%
Reports
13
ISP
Sky Italia srl
94.88.180.210
10/10
Confidence
94%
Reports
581
ISP
TIM
93.48.225.80
10/10
Confidence
94%
Reports
167
ISP
Fastweb
136.225.39.132
10/10
Confidence
94%
Reports
26
ISP
COLT Technology...
66.245.207.165
10/10
Confidence
94%
Reports
17
ISP
The Constant Co...
93.36.216.119
8/10
Confidence
94%
Reports
11
ISP
Fastweb
93.51.116.48
10/10
Confidence
93%
Reports
87
ISP
Fastweb
130.78.34.19
10/10
Confidence
93%
Reports
31
ISP
Dimensione S.r.l.
5.89.75.194
10/10
Confidence
91%
Reports
46
ISP
Fastweb
83.140.108.177
10/10
Confidence
90%
Reports
14
ISP
GlobalConnect AB
31.189.214.146
8/10
Confidence
89%
Reports
26
ISP
Wind Tre S.p.A.
5.88.119.21
8/10
Confidence
87%
Reports
16
ISP
Fastweb
IPs with similar threat level and confidence scores.
15
Related IPs
8.1/10
Avg Threat
59%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
46.28.196.140
6/10
Confidence
59%
Reports
8
Location
US
US
8.216.7.69
10/10
Confidence
59%
Reports
11
Location
JP
JP
107.189.8.56
8/10
Confidence
59%
Reports
12
Location
LU
LU
34.77.78.37
10/10
Confidence
59%
Reports
4
Location
BE
BE
182.48.210.206
10/10
Confidence
59%
Reports
4
Location
IN
IN
128.121.157.47
6/10
Confidence
59%
Reports
8
Location
US
US
183.129.171.170
10/10
Confidence
59%
Reports
5
Location
CN
CN
185.223.152.210
8/10
Confidence
59%
Reports
9
Location
US
US
155.94.252.246
6/10
Confidence
59%
Reports
8
Location
US
US
173.44.40.186
6/10
Confidence
59%
Reports
8
Location
US
US
103.186.52.26
10/10
Confidence
59%
Reports
8
Location
BD
BD
185.223.152.198
8/10
Confidence
59%
Reports
17
Location
US
US
103.137.154.225
10/10
Confidence
59%
Reports
5
Location
IN
IN
185.223.152.200
8/10
Confidence
59%
Reports
21
Location
US
US
209.139.25.51
6/10
Confidence
59%
Reports
9
Location
US
US