Substantial Risk
Threat level 7/10 for 216.189.149.119 based on 15 documented incidents.
Consistent suspicious behavior patterns. 88% confidence rating.
More threatening than 84% of monitored IPs
IP Address
216.189.149.119
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
HostUS
ASN 7489
15
Reports
Mixed
Data Source
Threat Categories
Email Spam
15
Brute-Force
1
Technical Details
Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.
Recommended Mitigations
Implement SPF, DKIM, DMARC, and use reputable email filtering services.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
26. September 2026
Last Activity
5. October 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 7489) with generally good reputation. The ISP HostUS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
1/10
Very Low
Confidence Score
88%
Verified
Confidence History
18. Aug 2026 - 5. Oct 2026
88%
Current
Stable
Trend
Security Reports (15)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Email Spam | Community | 75% | |
| Email Spam | Community | 75% | |
| Email Spam | Community | 75% | |
| Email Spam | Community | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam Brute-Force | Honeypot | 75% | |
| Email Spam | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 216.189.149.119
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
US
- ASN
- AS7489
- ISP
- HostUS
DNS Information
- Reverse DNS
- fastauszahlungo.live
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 15
- First Reported
- 18 Aug 2026
- Last Reported
- 5 Oct 2026, 10:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS7489
HostUS
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5
Total IPs Monitored
406
Total Reports
81.2
Reports per IP
Network Context
This IP address belongs to HostUS (AS7489), which manages 5 IP addresses in our monitoring system. Out of these, 406 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 832,725 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
15
avg: 9
++
Network Comparison
Compared against 13 IPs in ASN 7489
Threat Level
7/10
network avg: 6.7
=
Total Reports
15
network avg: 54
--
Network HostUS has overall threat level 2/10
Geographic Comparison
Compared against 148,159 IPs in US
Threat Level
7/10
country avg: 6.8
=
Total Reports
15
country avg: 18
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Sep 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Monday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
3/10
Current Threat
3/10
Distribution of threat categories reported over time.
Top Threat Categories
Email Spam
15
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
756,884 threat incidents tracked globally • Last 24h: 29,742 Logs
FEED
Top Threat Sources
-
01
United States148,134 19.6% -
02
Brazil111,841 14.8%
-
03
India87,172 11.5%
-
04
China46,061 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,369 2.4%
-
07
Netherlands17,978 2.4%
-
08
Pakistan17,806 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
12
Related IPs
6.7/10
Avg Threat
31%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
45.58.52.17
7/10
Confidence
80%
Reports
46
Location
US
US
104.128.228.18
7/10
Confidence
72%
Reports
10
Location
US
US
45.58.52.21
5/10
Confidence
69%
Reports
40
Location
US
US
216.189.159.207
5/10
Confidence
54%
Reports
12
Location
US
US
216.189.159.208
5/10
Confidence
26%
Reports
9
Location
US
US
45.124.64.81
4/10
Confidence
23%
Reports
1
Location
HK
HK
45.58.56.38
4/10
Confidence
23%
Reports
1
Location
US
US
45.58.52.25
10/10
Confidence
17%
Reports
21
Location
US
US
160.119.76.47
8/10
Confidence
7%
Reports
400
Location
SC
SC
216.189.157.132
8/10
Confidence
3%
Reports
97
Location
US
US
160.119.76.250
10/10
Confidence
2%
Reports
46
Location
SC
SC
45.58.52.3
7/10
Confidence
0%
Reports
1
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.227.15.209
8/10
Confidence
100%
Reports
269
ISP
DigitalOcean, LLC
136.90.54.236
8/10
Confidence
100%
Reports
216
ISP
Google LLC
136.90.53.160
8/10
Confidence
100%
Reports
138
ISP
Google LLC
136.90.48.99
8/10
Confidence
100%
Reports
136
ISP
Google LLC
136.90.54.222
8/10
Confidence
100%
Reports
130
ISP
Google LLC
34.26.152.184
10/10
Confidence
100%
Reports
129
ISP
Google LLC
63.250.36.183
10/10
Confidence
100%
Reports
125
ISP
Namecheap, Inc.
136.90.15.166
8/10
Confidence
100%
Reports
110
ISP
Google LLC
136.90.54.131
8/10
Confidence
100%
Reports
87
ISP
Google LLC
34.138.241.105
10/10
Confidence
100%
Reports
86
ISP
Google LLC
136.90.54.202
8/10
Confidence
100%
Reports
71
ISP
Google LLC
35.253.98.46
10/10
Confidence
100%
Reports
70
ISP
Google LLC
128.14.226.236
10/10
Confidence
100%
Reports
63
ISP
UCLOUD INFORMAT...
52.173.67.116
10/10
Confidence
100%
Reports
60
ISP
Microsoft Corpo...
136.90.30.63
8/10
Confidence
100%
Reports
59
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
89.248.172.10
10/10
Confidence
88%
Reports
449
Location
NL
NL
69.49.246.176
10/10
Confidence
88%
Reports
154
Location
US
US
81.56.73.33
8/10
Confidence
88%
Reports
9
Location
IT
IT
91.196.152.74
8/10
Confidence
88%
Reports
181
Location
FR
FR
209.99.185.69
8/10
Confidence
88%
Reports
15
Location
CH
CH
103.197.199.75
10/10
Confidence
88%
Reports
34
Location
MM
MM
4.224.40.94
10/10
Confidence
88%
Reports
17
Location
IN
IN
185.198.240.171
10/10
Confidence
88%
Reports
12
Location
US
US
124.105.255.132
10/10
Confidence
88%
Reports
8
Location
PH
PH
45.148.10.40
8/10
Confidence
88%
Reports
74
Location
NL
NL
45.138.12.47
8/10
Confidence
88%
Reports
17
Location
LT
LT
165.154.163.109
10/10
Confidence
88%
Reports
31
Location
US
US
101.47.155.9
10/10
Confidence
88%
Reports
59
Location
SG
SG
192.161.49.2
8/10
Confidence
88%
Reports
5,616
Location
US
US
84.13.142.21
8/10
Confidence
88%
Reports
24
Location
SE
SE