Elevated Risk
Elevated threat level 7/10 for IP 202.89.67.7 from 3 reported incidents.
Behavioral profile indicates cyber threat activity with 26% confidence.
More threatening than 82% of monitored IPs
IP Address
202.89.67.7
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
India
Location
AS Number for Interdomain...
ASN 18002
3
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
2
Web App Attack
2
Bad Web Bot
1
WP Content Scraping
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
8. September 2026
Last Activity
8. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 18002, operated by AS Number for Interdomain Routing) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
26%
Medium Confidence
Confidence History
29. Aug 2026 - 8. Sep 2026
26%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Bad Web Bot WP Content Scraping | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 202.89.67.7
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
IN
- ASN
- AS18002
- ISP
- AS Number for Interdomain Routing
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 3
- First Reported
- 29 Aug 2026
- Last Reported
- 8 Sep 2026, 10:09
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS18002
AS Number for Interdomain Routing
IN
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
3
Total IPs Monitored
18
Total Reports
6
Reports per IP
Network Context
This IP address belongs to AS Number for Interdomain Routing (AS18002), which manages 3 IP addresses in our monitoring system. Out of these, 18 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,725 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
3
avg: 9
--
Network Comparison
Compared against 106 IPs in ASN 18002
Threat Level
7/10
network avg: 6.3
=
Total Reports
3
network avg: 2
+
Network AS Number for Interdomain Routing has overall threat level 6/10
Geographic Comparison
Compared against 87,178 IPs in IN
Threat Level
7/10
country avg: 6.6
=
Total Reports
3
country avg: 3
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
2
Web App Attack
2
Bad Web Bot
1
WP Content Scraping
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
757,021 threat incidents tracked globally • Last 24h: 29,915 Logs
FEED
Top Threat Sources
-
01
United States148,159 19.6% -
02
Brazil111,851 14.8%
-
03
India87,178 11.5%
-
04
China46,071 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,386 2.4%
-
07
Netherlands17,983 2.4%
-
08
Pakistan17,811 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.7/10
Avg Threat
33%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
14.102.25.108
10/10
Confidence
66%
Reports
6
Location
IN
IN
103.87.101.186
8/10
Confidence
61%
Reports
6
Location
IN
IN
14.102.25.105
10/10
Confidence
53%
Reports
5
Location
IN
IN
14.102.25.106
8/10
Confidence
40%
Reports
4
Location
IN
IN
14.102.36.187
10/10
Confidence
39%
Reports
3
Location
IN
IN
110.172.131.12
8/10
Confidence
38%
Reports
3
Location
IN
IN
202.89.77.4
10/10
Confidence
36%
Reports
3
Location
IN
IN
110.172.131.177
10/10
Confidence
32%
Reports
3
Location
IN
IN
202.89.67.81
7/10
Confidence
31%
Reports
2
Location
IN
IN
110.172.151.2
8/10
Confidence
30%
Reports
19
Location
IN
IN
118.91.189.43
7/10
Confidence
25%
Reports
1
Location
IN
IN
110.172.131.120
8/10
Confidence
24%
Reports
5
Location
IN
IN
110.172.131.20
7/10
Confidence
24%
Reports
2
Location
IN
IN
202.89.77.117
6/10
Confidence
24%
Reports
2
Location
IN
IN
14.102.25.110
6/10
Confidence
24%
Reports
1
Location
IN
IN
103.162.197.104
7/10
Confidence
24%
Reports
1
Location
IN
IN
103.162.196.119
5/10
Confidence
23%
Reports
2
Location
IN
IN
110.172.131.8
6/10
Confidence
23%
Reports
1
Location
IN
IN
118.91.189.48
6/10
Confidence
23%
Reports
1
Location
IN
IN
118.91.189.41
6/10
Confidence
23%
Reports
1
Location
IN
IN
IPs from the same subnet range, likely same network segment.
20
Related IPs
6.3/10
Avg Threat
18%
Avg Confidence
6
High Threat
Elevated risk: Multiple related IPs are flagged
202.89.67.81
7/10
Confidence
31%
Reports
2
Location
IN
IN
202.89.67.134
6/10
Confidence
23%
Reports
1
Location
IN
IN
202.89.67.69
6/10
Confidence
23%
Reports
1
Location
IN
IN
202.89.67.22
6/10
Confidence
23%
Reports
1
Location
IN
IN
202.89.67.28
6/10
Confidence
23%
Reports
1
Location
IN
IN
202.89.67.118
6/10
Confidence
23%
Reports
1
Location
IN
IN
202.89.67.172
6/10
Confidence
23%
Reports
1
Location
IN
IN
202.89.67.133
6/10
Confidence
22%
Reports
1
Location
IN
IN
202.89.67.181
6/10
Confidence
22%
Reports
1
Location
IN
IN
202.89.67.75
6/10
Confidence
22%
Reports
1
Location
IN
IN
202.89.67.59
6/10
Confidence
22%
Reports
1
Location
IN
IN
202.89.67.70
6/10
Confidence
22%
Reports
1
Location
IN
IN
202.89.67.140
6/10
Confidence
22%
Reports
1
Location
IN
IN
202.89.67.203
7/10
Confidence
19%
Reports
1
Location
IN
IN
202.89.67.105
7/10
Confidence
14%
Reports
1
Location
IN
IN
202.89.67.160
5/10
Confidence
13%
Reports
1
Location
IN
IN
202.89.67.161
7/10
Confidence
5%
Reports
2
Location
IN
IN
202.89.67.21
7/10
Confidence
3%
Reports
2
Location
IN
IN
202.89.67.193
7/10
Confidence
3%
Reports
2
Location
IN
IN
202.89.67.115
6/10
Confidence
2%
Reports
2
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
160.187.54.114
10/10
Confidence
100%
Reports
139
ISP
Imegh Private L...
69.57.172.119
8/10
Confidence
100%
Reports
73
ISP
WHG Hosting Ser...
103.47.15.110
10/10
Confidence
100%
Reports
62
ISP
Precious netcom...
103.130.90.169
10/10
Confidence
100%
Reports
51
ISP
Skylink Fiberne...
103.170.157.62
10/10
Confidence
100%
Reports
49
ISP
Airline Interne...
139.59.83.112
10/10
Confidence
100%
Reports
36
ISP
DigitalOcean, LLC
202.176.1.225
10/10
Confidence
100%
Reports
32
ISP
RailTel Corpora...
121.242.232.147
10/10
Confidence
100%
Reports
30
ISP
TATA Communicat...
103.192.199.245
10/10
Confidence
100%
Reports
30
ISP
NEEVAI SUPERCLO...
183.82.103.178
8/10
Confidence
100%
Reports
27
ISP
Atria Convergen...
103.58.64.209
10/10
Confidence
100%
Reports
24
ISP
INFONET COMM EN...
14.96.50.90
8/10
Confidence
100%
Reports
24
ISP
Tata Teleservic...
106.51.93.11
8/10
Confidence
100%
Reports
24
ISP
Atria Convergen...
182.70.255.242
10/10
Confidence
100%
Reports
24
ISP
Bharti Airtel L...
122.168.197.138
10/10
Confidence
100%
Reports
22
ISP
Bharti Airtel L...
IPs with similar threat level and confidence scores.
15
Related IPs
4.9/10
Avg Threat
26%
Avg Confidence
113.131.52.20
5/10
Confidence
26%
Reports
1
Location
KR
KR
114.185.34.31
5/10
Confidence
26%
Reports
1
Location
JP
JP
106.252.45.55
5/10
Confidence
26%
Reports
1
Location
KR
KR
121.143.76.124
5/10
Confidence
26%
Reports
1
Location
KR
KR
124.57.83.180
5/10
Confidence
26%
Reports
1
Location
KR
KR
220.71.224.154
5/10
Confidence
26%
Reports
1
Location
KR
KR
180.94.138.127
5/10
Confidence
26%
Reports
1
Location
MO
MO
211.202.198.112
4/10
Confidence
26%
Reports
2
Location
KR
KR
220.78.38.113
5/10
Confidence
26%
Reports
1
Location
KR
KR
164.90.217.64
5/10
Confidence
26%
Reports
1
Location
DE
DE
121.169.226.232
5/10
Confidence
26%
Reports
1
Location
KR
KR
2602:fa5d::ba
6/10
Confidence
26%
Reports
1
Location
TR
TR
182.220.213.61
5/10
Confidence
26%
Reports
1
Location
KR
KR
152.52.197.130
4/10
Confidence
26%
Reports
2
Location
IN
IN
218.150.192.242
5/10
Confidence
26%
Reports
1
Location
KR
KR