Significant Threat
IP 107.189.28.140 identified as significant threat (8/10) from 664 events.
Multiple malicious indicators detected. Confidence level: 94%.
More threatening than 90% of monitored IPs
IP Address
107.189.28.140
IPv4
Public
LU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Luxembourg
Location
FranTech Solutions
ASN 53667
664
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
Fraud VoIP
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
22. August 2026
Last Activity
18. September 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 53667) with generally good reputation. The ISP FranTech Solutions maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
26. Aug 2026 - 18. Sep 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 107.189.28.140
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
LU
- ASN
- AS53667
- ISP
- FranTech Solutions
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 664
- First Reported
- 7 Jun 2026
- Last Reported
- 18 Sep 2026, 22:38
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS53667
FranTech Solutions
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
245
Total IPs Monitored
11,433
Total Reports
46.7
Reports per IP
Network Context
This IP address belongs to FranTech Solutions (AS53667), which manages 245 IP addresses in our monitoring system. Out of these, 11,433 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,659 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
664
avg: 9
++
Network Comparison
Compared against 429 IPs in ASN 53667
Threat Level
8/10
network avg: 7.1
=
Total Reports
664
network avg: 27
++
Network FranTech Solutions has overall threat level 3/10
Geographic Comparison
Compared against 369 IPs in LU
Threat Level
8/10
country avg: 6.7
+
Total Reports
664
country avg: 15
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Aug 2026
43 reports
Daily Average
7.8
reports/day
Most Active
Thursday
130 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
662
Fraud VoIP
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 31 reports
Weekly Activity
Geographic Threat Distribution
698,240 threat incidents tracked globally • Last 24h: 22,856 Logs
FEED
Top Threat Sources
-
01
United States134,916 19.3% -
02
Brazil109,420 15.7%
-
03
India75,799 10.9%
-
04
China43,116 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,472 2.4%
-
07
Argentina16,067 2.3%
-
08
Germany15,814 2.3%
-
09
Pakistan15,208 2.2%
-
10
Colombia15,077 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
107.189.1.82
10/10
Confidence
100%
Reports
22
Location
LU
LU
209.141.43.146
10/10
Confidence
98%
Reports
16
Location
US
US
107.189.1.176
8/10
Confidence
97%
Reports
41
Location
LU
LU
209.141.43.77
8/10
Confidence
97%
Reports
23
Location
US
US
45.61.184.228
8/10
Confidence
97%
Reports
14
Location
US
US
198.98.62.191
8/10
Confidence
96%
Reports
39
Location
US
US
198.98.53.110
10/10
Confidence
96%
Reports
23
Location
US
US
198.98.55.71
10/10
Confidence
94%
Reports
120
Location
US
US
199.195.254.215
10/10
Confidence
94%
Reports
111
Location
US
US
209.141.41.212
10/10
Confidence
94%
Reports
97
Location
US
US
209.141.47.40
8/10
Confidence
94%
Reports
44
Location
US
US
199.195.250.193
8/10
Confidence
94%
Reports
43
Location
US
US
198.98.57.120
8/10
Confidence
94%
Reports
40
Location
US
US
209.141.62.101
10/10
Confidence
94%
Reports
39
Location
US
US
107.189.30.132
10/10
Confidence
94%
Reports
33
Location
LU
LU
209.141.57.192
8/10
Confidence
94%
Reports
32
Location
US
US
209.141.57.35
10/10
Confidence
94%
Reports
29
Location
US
US
209.141.33.207
10/10
Confidence
94%
Reports
29
Location
US
US
198.98.60.192
10/10
Confidence
94%
Reports
28
Location
US
US
199.195.249.249
8/10
Confidence
94%
Reports
27
Location
US
US
IPs from the same subnet range, likely same network segment.
3
Related IPs
9/10
Avg Threat
54%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.139.181
10/10
Confidence
100%
Reports
614
ISP
Offshore LC
107.189.1.82
10/10
Confidence
100%
Reports
22
ISP
FranTech Solutions
176.65.139.236
8/10
Confidence
100%
Reports
15
ISP
Offshore LC
107.189.1.176
8/10
Confidence
97%
Reports
41
ISP
PONYNET
176.65.139.103
10/10
Confidence
94%
Reports
536
ISP
Offshore LC
176.65.139.36
10/10
Confidence
94%
Reports
99
ISP
Offshore LC
176.65.139.177
10/10
Confidence
94%
Reports
63
ISP
Offshore LC
176.65.139.188
10/10
Confidence
94%
Reports
62
ISP
Offshore LC
176.65.139.56
10/10
Confidence
94%
Reports
55
ISP
Offshore LC
176.65.139.87
10/10
Confidence
94%
Reports
49
ISP
Offshore LC
80.90.55.169
10/10
Confidence
94%
Reports
35
ISP
Visual Online S.A.
176.65.139.99
10/10
Confidence
94%
Reports
34
ISP
Offshore LC
107.189.30.132
10/10
Confidence
94%
Reports
33
ISP
FranTech Solutions
176.65.139.151
10/10
Confidence
94%
Reports
29
ISP
Offshore LC
176.65.139.169
10/10
Confidence
94%
Reports
26
ISP
Offshore LC
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
192.161.49.2
8/10
Confidence
94%
Reports
4,653
Location
US
US
66.163.122.211
10/10
Confidence
94%
Reports
4,231
Location
US
US
45.198.224.18
10/10
Confidence
94%
Reports
4,053
Location
US
US
5.187.35.26
8/10
Confidence
94%
Reports
3,724
Location
NL
NL
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
213.209.159.136
10/10
Confidence
94%
Reports
3,486
Location
TW
TW
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
5.187.35.142
8/10
Confidence
94%
Reports
3,018
Location
NL
NL
177.125.137.18
10/10
Confidence
94%
Reports
2,963
Location
MX
MX
45.205.1.110
10/10
Confidence
94%
Reports
2,318
Location
US
US
87.251.64.159
10/10
Confidence
94%
Reports
2,236
Location
US
US
91.92.40.66
10/10
Confidence
94%
Reports
2,101
Location
BG
BG
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2