High Risk
IP 185.104.184.228 rated at threat level 8/10 based on 12 security reports.
Pattern analysis reveals concerning activity. Confidence: 55%.
More threatening than 89% of monitored IPs
IP Address
185.104.184.228
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
M247 Europe SRL
ASN 9009
12
Reports
Mixed
Data Source
Threat Categories
Brute-Force
4
Web App Attack
3
WP Login Brute Force
3
WP Version Scanning
2
WP Plugin Scanning
2
WP Config Exposure
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 5 days indicates persistent threat actor operations.
First Observed
17. September 2026
Last Activity
22. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 9009) with generally good reputation. The ISP M247 Europe SRL maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
55%
High Confidence
Confidence History
1. Sep 2025 - 22. Sep 2026
55%
Current
Stable
Trend
Security Reports (12)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Web App Attack | Honeypot x28 | 75% | |
| Web App Attack | Honeypot x26 | 75% | |
| Web App Attack | Honeypot x47 | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.104.184.228
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS9009
- ISP
- M247 Europe SRL
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 12
- First Reported
- 1 Sep 2025
- Last Reported
- 22 Sep 2026, 06:16
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9009
M247 Europe SRL
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
581
Total IPs Monitored
7,869
Total Reports
13.5
Reports per IP
Network Context
This IP address belongs to M247 Europe SRL (AS9009), which manages 581 IP addresses in our monitoring system. Out of these, 7,869 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 848,817 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
12
avg: 9
+
Network Comparison
Compared against 2,033 IPs in ASN 9009
Threat Level
8/10
network avg: 7.0
=
Total Reports
12
network avg: 8
++
Network M247 Europe SRL has overall threat level 3/10
Geographic Comparison
Compared against 18,827 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
12
country avg: 30
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
17 Sep 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
4
WP Login Brute Force
3
Web App Attack
3
WP Admin Brute Force
2
WP Plugin Scanning
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
771,313 threat incidents tracked globally • Last 24h: 28,093 Logs
FEED
Top Threat Sources
-
01
United States150,613 19.5% -
02
Brazil112,811 14.6%
-
03
India89,739 11.6%
-
04
China46,548 6%
-
05
SC29,265 3.8%
-
06
Germany18,827 2.4%
-
07
Pakistan18,355 2.4%
-
08
Netherlands18,251 2.4%
-
09
Argentina16,665 2.2%
-
10
Colombia15,335 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
87%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
62.133.46.14
10/10
Confidence
96%
Reports
45
Location
IR
IR
62.133.46.29
8/10
Confidence
96%
Reports
20
Location
IR
IR
193.176.86.92
10/10
Confidence
94%
Reports
195
Location
DE
DE
217.138.216.70
10/10
Confidence
94%
Reports
73
Location
DE
DE
217.138.216.62
10/10
Confidence
94%
Reports
23
Location
DE
DE
62.133.46.7
10/10
Confidence
94%
Reports
18
Location
IR
IR
62.133.46.24
10/10
Confidence
94%
Reports
15
Location
IR
IR
81.181.106.69
8/10
Confidence
93%
Reports
776
Location
US
US
135.136.13.106
10/10
Confidence
89%
Reports
10
Location
CZ
CZ
79.110.54.94
10/10
Confidence
87%
Reports
45
Location
US
US
38.132.122.177
8/10
Confidence
86%
Reports
11
Location
US
US
152.89.163.228
10/10
Confidence
85%
Reports
11
Location
DE
DE
146.70.231.130
8/10
Confidence
85%
Reports
11
Location
RU
RU
194.110.115.16
8/10
Confidence
85%
Reports
9
Location
BE
BE
82.102.18.188
8/10
Confidence
83%
Reports
107
Location
FR
FR
146.70.197.226
7/10
Confidence
82%
Reports
25
Location
DK
DK
130.195.221.245
10/10
Confidence
80%
Reports
13
Location
FI
FI
45.92.33.82
7/10
Confidence
79%
Reports
12
Location
GR
GR
146.70.194.238
8/10
Confidence
75%
Reports
396
Location
FR
FR
82.102.18.118
8/10
Confidence
74%
Reports
289
Location
FR
FR
IPs from the same subnet range, likely same network segment.
7
Related IPs
7.6/10
Avg Threat
27%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
185.104.184.230
8/10
Confidence
43%
Reports
12
Location
DE
DE
185.104.184.43
7/10
Confidence
28%
Reports
1
Location
DE
DE
185.104.184.204
8/10
Confidence
26%
Reports
7
Location
DE
DE
185.104.184.206
8/10
Confidence
26%
Reports
6
Location
DE
DE
185.104.184.198
8/10
Confidence
26%
Reports
6
Location
DE
DE
185.104.184.196
7/10
Confidence
23%
Reports
3
Location
DE
DE
185.104.184.0
7/10
Confidence
17%
Reports
1
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,122
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
133
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
18
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
50.7.86.141
8/10
Confidence
100%
Reports
14
ISP
FDCservers.net
194.94.79.252
8/10
Confidence
100%
Reports
14
ISP
Verein zur Foer...
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
55%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
8.235.88.183
8/10
Confidence
55%
Reports
3
Location
US
US
35.247.215.224
8/10
Confidence
55%
Reports
3
Location
BR
BR
216.73.163.168
8/10
Confidence
55%
Reports
3
Location
US
US
216.73.163.171
8/10
Confidence
55%
Reports
3
Location
US
US
152.32.225.117
8/10
Confidence
55%
Reports
4
Location
HK
HK
136.66.36.169
5/10
Confidence
55%
Reports
4
Location
US
US
35.231.226.178
5/10
Confidence
55%
Reports
4
Location
US
US
66.132.195.165
10/10
Confidence
55%
Reports
4
Location
US
US
34.139.94.119
10/10
Confidence
55%
Reports
4
Location
US
US
102.91.132.37
10/10
Confidence
55%
Reports
4
Location
NG
NG
34.42.66.37
10/10
Confidence
55%
Reports
4
Location
US
US
35.216.14.192
10/10
Confidence
55%
Reports
4
Location
KR
KR
34.146.160.38
10/10
Confidence
55%
Reports
4
Location
JP
JP
5.226.140.25
10/10
Confidence
55%
Reports
4
Location
GB
GB
5.226.140.42
10/10
Confidence
55%
Reports
4
Location
GB
GB