Notable Threat
IP 189.1.171.213 rated 8/10 from 17 verified reports.
Multiple security incidents attributed to this IP. Confidence: 89%.
More threatening than 93% of monitored IPs
IP Address
189.1.171.213
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
Latitude.sh
ASN 396356
17
Reports
Honeypot
Data Source
Threat Categories
IoT Targeted
11
Fraud VoIP
6
Technical Details
IoT-targeted attacks exploit weak security in smart devices, cameras, routers, and other connected devices.
Recommended Mitigations
Segment IoT networks, update device firmware, change default credentials, and disable UPnP.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 days indicates persistent threat actor operations.
First Observed
26. October 2026
Last Activity
30. October 2026
Recent (7 days)
6 incidents
Reputable Network
This IP is hosted on a network (ASN 396356) with generally good reputation. The ISP Latitude.sh maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
89%
Verified
Confidence History
19. Jul 2026 - 30. Oct 2026
89%
Current
Stable
Trend
Security Reports (17)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Fraud VoIP | Honeypot | 75% |
| New | Fraud VoIP | Honeypot | 75% |
| New | Fraud VoIP | Honeypot | 75% |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% | |
| IoT Targeted | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 189.1.171.213
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS396356
- ISP
- Latitude.sh
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 17
- First Reported
- 19 Jul 2026
- Last Reported
- 30 Oct 2026, 00:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS396356
Latitude.sh
MX
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
225
Total IPs Monitored
2,277
Total Reports
10.1
Reports per IP
Network Context
This IP address belongs to Latitude.sh (AS396356), which manages 225 IP addresses in our monitoring system. Out of these, 2,277 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,296,531 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
17
avg: 7
++
Network Comparison
Compared against 3,526 IPs in ASN 396356
Threat Level
8/10
network avg: 6.9
+
Total Reports
17
network avg: 9
++
Network Latitude.sh has overall threat level 2/10
Geographic Comparison
Compared against 23,068 IPs in DE
Threat Level
8/10
country avg: 7.1
=
Total Reports
17
country avg: 26
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 Oct 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Thursday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
IoT Targeted
11
Fraud VoIP
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,181,822 threat incidents tracked globally • Last 24h: 27,620 Logs
FEED
Top Threat Sources
-
01
Brazil258,784 21.9% -
02
United States200,683 17% -
03
India102,690 8.7% -
04
China49,763 4.2% -
05
Argentina42,005 3.6% -
06
SC29,414 2.5% -
07
Mexico27,530 2.3%
-
08
Russia26,601 2.3% -
09
Colombia24,057 2% -
10
Germany23,068 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.3/10
Avg Threat
86%
Avg Confidence
3
High Threat
64.34.94.207
10/10
Confidence
94%
Reports
18
Location
JP
JP
152.236.31.239
7/10
Confidence
93%
Reports
56
Location
US
US
152.236.39.3
7/10
Confidence
91%
Reports
69
Location
US
US
151.241.114.110
6/10
Confidence
87%
Reports
16
Location
US
US
151.245.51.171
6/10
Confidence
86%
Reports
17
Location
US
US
151.244.31.171
6/10
Confidence
86%
Reports
15
Location
US
US
151.244.104.105
6/10
Confidence
86%
Reports
14
Location
US
US
151.244.104.154
6/10
Confidence
85%
Reports
18
Location
US
US
151.245.31.37
6/10
Confidence
85%
Reports
18
Location
US
US
151.240.223.54
6/10
Confidence
85%
Reports
17
Location
US
US
151.240.225.154
6/10
Confidence
85%
Reports
17
Location
US
US
151.240.219.35
6/10
Confidence
85%
Reports
17
Location
US
US
151.245.107.164
6/10
Confidence
85%
Reports
17
Location
US
US
151.245.99.102
6/10
Confidence
85%
Reports
16
Location
US
US
151.245.17.126
6/10
Confidence
85%
Reports
16
Location
US
US
151.245.49.134
6/10
Confidence
85%
Reports
15
Location
US
US
151.244.39.160
6/10
Confidence
85%
Reports
15
Location
US
US
151.244.27.37
6/10
Confidence
85%
Reports
15
Location
US
US
151.245.45.181
6/10
Confidence
84%
Reports
17
Location
US
US
151.244.100.98
6/10
Confidence
84%
Reports
16
Location
US
US
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
0%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,480
ISP
Feo Prest SRL
34.89.170.20
8/10
Confidence
100%
Reports
73
ISP
Google LLC
35.198.76.170
8/10
Confidence
100%
Reports
61
ISP
Google LLC
34.40.11.197
8/10
Confidence
100%
Reports
50
ISP
Google LLC
2a0e:d604:1:1ab::2
10/10
Confidence
100%
Reports
49
ISP
H2nexus Cloud S...
34.89.162.226
8/10
Confidence
100%
Reports
46
ISP
Google LLC
35.198.107.220
10/10
Confidence
100%
Reports
45
ISP
Google LLC
93.152.221.210
10/10
Confidence
100%
Reports
30
ISP
TechTies Inc.
93.152.221.36
10/10
Confidence
100%
Reports
25
ISP
TechTies Inc.
2600:3c17::2000:16ff:fe04:5586
10/10
Confidence
100%
Reports
18
ISP
Akamai Connecte...
35.198.92.138
8/10
Confidence
98%
Reports
64
ISP
Google LLC
34.179.185.147
10/10
Confidence
98%
Reports
57
ISP
Google LLC
34.89.179.232
8/10
Confidence
98%
Reports
46
ISP
Google LLC
172.105.76.7
10/10
Confidence
98%
Reports
26
ISP
Akamai Connecte...
35.198.90.114
8/10
Confidence
98%
Reports
24
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
69.5.169.28
10/10
Confidence
89%
Reports
31
Location
DE
DE
80.76.100.184
10/10
Confidence
89%
Reports
14
Location
RU
RU
172.110.223.9
7/10
Confidence
89%
Reports
13
Location
HK
HK
40.124.113.127
10/10
Confidence
89%
Reports
12
Location
US
US
54.149.204.90
10/10
Confidence
89%
Reports
12
Location
US
US
3.97.253.250
10/10
Confidence
89%
Reports
12
Location
CA
CA
188.240.59.43
8/10
Confidence
89%
Reports
15
Location
GB
GB
20.201.77.247
10/10
Confidence
89%
Reports
15
Location
BR
BR
69.5.169.203
8/10
Confidence
89%
Reports
26
Location
DE
DE
193.124.20.250
8/10
Confidence
89%
Reports
31
Location
DE
DE
91.196.152.77
10/10
Confidence
89%
Reports
208
Location
FR
FR
91.196.152.47
8/10
Confidence
89%
Reports
215
Location
FR
FR
112.168.171.175
10/10
Confidence
89%
Reports
12
Location
KR
KR
139.224.207.97
10/10
Confidence
89%
Reports
28
Location
CN
CN
91.196.152.48
10/10
Confidence
89%
Reports
228
Location
FR
FR