Substantial Risk
Threat level 7/10 for 107.189.22.128 based on 133 documented incidents.
Consistent suspicious behavior patterns. 77% confidence rating.
More threatening than 84% of monitored IPs
IP Address
107.189.22.128
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
The Netherlands
Location
RouterHosting LLC
ASN 14956
133
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
30
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
5. September 2026
Last Activity
9. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 14956) with generally good reputation. The ISP RouterHosting LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
7/10
High
Confidence Score
76%
Verified
Confidence History
9. Sep 2026
77%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 107.189.22.128
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS14956
- ISP
- RouterHosting LLC
DNS Information
- Reverse DNS
- 128.22.189.107.static.cloudzy.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 133
- First Reported
- 5 Sep 2026
- Last Reported
- 9 Sep 2026, 19:53
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS14956
RouterHosting LLC
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
170
Total IPs Monitored
21,290
Total Reports
125.2
Reports per IP
Network Context
This IP address belongs to RouterHosting LLC (AS14956), which manages 170 IP addresses in our monitoring system. Out of these, 21,290 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 809,622 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
133
avg: 9
++
Network Comparison
Compared against 566 IPs in ASN 14956
Threat Level
7/10
network avg: 7.6
=
Total Reports
133
network avg: 48
++
Network RouterHosting LLC has overall threat level 3/10
Geographic Comparison
Compared against 17,539 IPs in NL
Threat Level
7/10
country avg: 6.3
=
Total Reports
133
country avg: 30
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Sep 2026
53 reports
Daily Average
4.4
reports/day
Most Active
Sunday
53 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
133
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 10 reports
Weekly Activity
Geographic Threat Distribution
736,243 threat incidents tracked globally • Last 24h: 29,941 Logs
FEED
Top Threat Sources
-
01
United States143,895 19.5% -
02
Brazil110,844 15.1%
-
03
India82,742 11.2%
-
04
China44,909 6.1%
-
05
SC29,241 4%
-
06
Germany17,606 2.4%
-
07
Netherlands17,539 2.4%
-
08
Pakistan16,768 2.3%
-
09
Argentina16,197 2.2%
-
10
Colombia15,140 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
88%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
144.172.108.80
8/10
Confidence
96%
Reports
12
Location
US
US
45.61.145.5
10/10
Confidence
94%
Reports
39
Location
US
US
144.172.104.147
10/10
Confidence
94%
Reports
30
Location
US
US
2602:fa59:10:c38::1
10/10
Confidence
94%
Reports
11
Location
US
US
216.126.225.6
10/10
Confidence
93%
Reports
24
Location
US
US
172.86.73.137
7/10
Confidence
91%
Reports
180
Location
US
US
216.126.236.85
7/10
Confidence
91%
Reports
97
Location
US
US
144.172.97.249
7/10
Confidence
91%
Reports
56
Location
US
US
144.172.100.157
7/10
Confidence
91%
Reports
38
Location
US
US
144.172.85.75
8/10
Confidence
91%
Reports
11
Location
US
US
172.86.113.38
7/10
Confidence
89%
Reports
261
Location
US
US
144.172.99.12
8/10
Confidence
89%
Reports
21
Location
US
US
172.86.67.48
10/10
Confidence
89%
Reports
9
Location
DE
DE
144.172.103.203
7/10
Confidence
88%
Reports
117
Location
US
US
107.189.27.179
10/10
Confidence
86%
Reports
85
Location
NL
NL
172.86.66.113
10/10
Confidence
86%
Reports
16
Location
DE
DE
144.172.93.238
8/10
Confidence
84%
Reports
9
Location
US
US
144.172.117.61
10/10
Confidence
77%
Reports
11
Location
US
US
172.86.89.217
7/10
Confidence
71%
Reports
49
Location
US
US
144.172.104.239
10/10
Confidence
67%
Reports
13
Location
US
US
IPs from the same subnet range, likely same network segment.
7
Related IPs
7.3/10
Avg Threat
8%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
107.189.22.104
7/10
Confidence
33%
Reports
78
Location
NL
NL
107.189.22.172
7/10
Confidence
20%
Reports
243
Location
NL
NL
107.189.22.0
7/10
Confidence
4%
Reports
2
Location
NL
NL
107.189.22.56
7/10
Confidence
1%
Reports
304
Location
NL
NL
107.189.22.183
10/10
Confidence
0%
Reports
4
Location
NL
NL
107.189.22.97
6/10
Confidence
0%
Reports
1
Location
NL
NL
107.189.22.140
7/10
Confidence
0%
Reports
1
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.236
8/10
Confidence
100%
Reports
104
ISP
TechTies Inc.
94.154.43.203
8/10
Confidence
100%
Reports
92
ISP
Storm Industrie...
51.124.112.121
10/10
Confidence
100%
Reports
21
ISP
Microsoft Corpo...
20.229.185.186
10/10
Confidence
100%
Reports
19
ISP
Microsoft Corpo...
45.134.225.48
8/10
Confidence
100%
Reports
18
ISP
ColocaTel Inc.
94.154.43.223
8/10
Confidence
100%
Reports
14
ISP
Storm Industrie...
94.154.43.135
8/10
Confidence
100%
Reports
13
ISP
Storm Industrie...
185.19.40.179
8/10
Confidence
99%
Reports
16
ISP
1337 Services GmbH
89.42.231.200
8/10
Confidence
98%
Reports
1,259
ISP
Amarutu Technol...
130.12.180.48
10/10
Confidence
98%
Reports
183
ISP
Omegatech LTD
188.166.95.31
10/10
Confidence
98%
Reports
81
ISP
DigitalOcean, LLC
164.92.211.98
8/10
Confidence
98%
Reports
50
ISP
DigitalOcean, LLC
85.11.167.132
10/10
Confidence
98%
Reports
32
ISP
TechTies Inc.
213.206.207.146
8/10
Confidence
98%
Reports
12
ISP
ML Consultancy
213.206.207.162
10/10
Confidence
97%
Reports
17
ISP
ML Consultancy
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
77%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2.57.122.238
10/10
Confidence
77%
Reports
14,276
Location
RO
RO
66.132.172.160
8/10
Confidence
77%
Reports
7,874
Location
US
US
66.132.172.168
10/10
Confidence
77%
Reports
7,826
Location
US
US
66.132.172.161
10/10
Confidence
77%
Reports
7,795
Location
US
US
66.132.172.167
8/10
Confidence
77%
Reports
7,782
Location
US
US
185.233.247.245
8/10
Confidence
77%
Reports
4,910
Location
TR
TR
66.163.122.211
10/10
Confidence
77%
Reports
4,231
Location
US
US
160.119.71.92
10/10
Confidence
77%
Reports
1,907
Location
SC
SC
130.12.180.65
10/10
Confidence
77%
Reports
1,488
Location
NL
NL
64.62.156.192
8/10
Confidence
77%
Reports
1,353
Location
US
US
65.49.20.66
8/10
Confidence
77%
Reports
1,158
Location
US
US
207.90.244.17
8/10
Confidence
77%
Reports
1,103
Location
US
US
80.94.95.83
10/10
Confidence
77%
Reports
1,061
Location
RO
RO
65.49.1.162
8/10
Confidence
77%
Reports
977
Location
US
US
65.49.1.122
8/10
Confidence
77%
Reports
973
Location
US
US