Notable Threat
IP 89.117.104.28 rated 8/10 from 4 verified reports.
Multiple security incidents attributed to this IP. Confidence: 26%.
More threatening than 88% of monitored IPs
IP Address
89.117.104.28
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
Cyberzone S.A.
ASN 209854
4
Reports
Mixed
Data Source
Threat Categories
WP Version Scanning
2
WP Plugin Scanning
2
WP Config Exposure
2
Brute-Force
1
WP Login Brute Force
1
WP Admin Brute Force
1
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 5 days indicates persistent threat actor operations.
First Observed
15. September 2026
Last Activity
20. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 209854, operated by Cyberzone S.A.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
26%
Medium Confidence
Confidence History
2. Feb 2026 - 20. Sep 2026
26%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force WP Admin Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 89.117.104.28
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS209854
- ISP
- Cyberzone S.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 4
- First Reported
- 2 Feb 2026
- Last Reported
- 20 Sep 2026, 09:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS209854
Cyberzone S.A.
US
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
102
Total IPs Monitored
399
Total Reports
3.9
Reports per IP
Network Context
This IP address belongs to Cyberzone S.A. (AS209854), which manages 102 IP addresses in our monitoring system. Out of these, 399 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 812,508 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
4
avg: 9
--
Network Comparison
Compared against 237 IPs in ASN 209854
Threat Level
8/10
network avg: 7.7
=
Total Reports
4
network avg: 4
=
Network Cyberzone S.A. has overall threat level 4/10
Geographic Comparison
Compared against 17,714 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
4
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 Sep 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Sunday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Plugin Scanning
2
WP Version Scanning
2
WP Config Exposure
2
WP Login Brute Force
1
WP Admin Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
738,709 threat incidents tracked globally • Last 24h: 42,964 Logs
FEED
Top Threat Sources
-
01
United States144,431 19.6% -
02
Brazil111,033 15%
-
03
India83,095 11.2%
-
04
China45,086 6.1%
-
05
SC29,242 4%
-
06
Germany17,714 2.4%
-
07
Netherlands17,571 2.4%
-
08
Pakistan16,879 2.3%
-
09
Argentina16,210 2.2%
-
10
Colombia15,148 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
51%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
89.117.46.54
10/10
Confidence
94%
Reports
33
Location
BA
BA
86.38.102.9
10/10
Confidence
82%
Reports
20
Location
AU
AU
86.38.102.7
10/10
Confidence
77%
Reports
17
Location
AU
AU
62.197.152.84
10/10
Confidence
67%
Reports
12
Location
AD
AD
89.117.104.46
8/10
Confidence
51%
Reports
5
Location
DE
DE
86.38.102.14
10/10
Confidence
50%
Reports
11
Location
AU
AU
172.216.252.21
10/10
Confidence
50%
Reports
6
Location
US
US
86.38.102.11
10/10
Confidence
47%
Reports
9
Location
AU
AU
172.216.11.16
10/10
Confidence
47%
Reports
7
Location
US
US
86.38.102.21
10/10
Confidence
46%
Reports
12
Location
AU
AU
172.216.245.43
10/10
Confidence
45%
Reports
3
Location
HK
HK
172.216.11.43
10/10
Confidence
44%
Reports
5
Location
US
US
172.216.11.28
10/10
Confidence
43%
Reports
5
Location
US
US
172.216.252.33
10/10
Confidence
42%
Reports
4
Location
US
US
172.216.11.8
10/10
Confidence
41%
Reports
6
Location
US
US
93.185.162.149
8/10
Confidence
41%
Reports
3
Location
ID
ID
89.117.104.31
8/10
Confidence
40%
Reports
7
Location
DE
DE
172.216.11.21
10/10
Confidence
40%
Reports
4
Location
US
US
172.216.11.33
10/10
Confidence
40%
Reports
3
Location
US
US
172.216.11.11
10/10
Confidence
39%
Reports
4
Location
US
US
IPs from the same subnet range, likely same network segment.
18
Related IPs
7/10
Avg Threat
23%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
89.117.104.46
8/10
Confidence
51%
Reports
5
Location
DE
DE
89.117.104.31
8/10
Confidence
40%
Reports
7
Location
DE
DE
89.117.104.33
8/10
Confidence
33%
Reports
6
Location
DE
DE
89.117.104.21
8/10
Confidence
27%
Reports
3
Location
DE
DE
89.117.104.16
7/10
Confidence
23%
Reports
5
Location
DE
DE
89.117.104.8
10/10
Confidence
23%
Reports
3
Location
DE
DE
89.117.104.43
6/10
Confidence
23%
Reports
2
Location
DE
DE
89.117.104.36
6/10
Confidence
23%
Reports
1
Location
DE
DE
89.117.104.41
6/10
Confidence
23%
Reports
1
Location
DE
DE
89.117.104.26
6/10
Confidence
23%
Reports
1
Location
DE
DE
89.117.104.18
7/10
Confidence
22%
Reports
9
Location
DE
DE
89.117.104.51
7/10
Confidence
21%
Reports
4
Location
DE
DE
89.117.104.6
7/10
Confidence
21%
Reports
3
Location
DE
DE
89.117.104.48
7/10
Confidence
20%
Reports
3
Location
DE
DE
89.117.104.53
7/10
Confidence
18%
Reports
5
Location
DE
DE
89.117.104.11
6/10
Confidence
16%
Reports
2
Location
DE
DE
89.117.104.23
6/10
Confidence
14%
Reports
2
Location
DE
DE
89.117.104.38
6/10
Confidence
0%
Reports
2
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
844
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
38
ISP
TechTies Inc.
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
27
ISP
netcup GmbH
5.175.206.193
8/10
Confidence
100%
Reports
20
ISP
AltunHOST LTD
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
151.243.113.84
8/10
Confidence
100%
Reports
13
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
13
ISP
Clouvider Limited
138.201.205.59
8/10
Confidence
99%
Reports
17
ISP
Hetzner Online ...
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
94.26.106.73
10/10
Confidence
99%
Reports
12
ISP
TechTies Inc.
136.92.18.166
8/10
Confidence
98%
Reports
28
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
26%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
64.225.226.35
10/10
Confidence
26%
Reports
1,262
Location
US
US
114.172.244.131
10/10
Confidence
26%
Reports
602
Location
JP
JP
47.89.154.16
10/10
Confidence
26%
Reports
460
Location
US
US
151.81.23.51
10/10
Confidence
26%
Reports
259
Location
IT
IT
115.78.9.138
8/10
Confidence
26%
Reports
189
Location
VN
VN
98.217.44.73
10/10
Confidence
26%
Reports
159
Location
US
US
137.184.228.138
10/10
Confidence
26%
Reports
154
Location
US
US
124.251.110.186
10/10
Confidence
26%
Reports
140
Location
CN
CN
103.103.245.61
10/10
Confidence
26%
Reports
129
Location
HK
HK
172.245.106.112
10/10
Confidence
26%
Reports
124
Location
US
US
87.246.54.153
8/10
Confidence
26%
Reports
116
Location
BG
BG
153.75.91.173
7/10
Confidence
26%
Reports
114
Location
US
US
135.181.4.158
7/10
Confidence
26%
Reports
99
Location
FI
FI
172.86.66.40
7/10
Confidence
26%
Reports
94
Location
DE
DE
78.130.39.150
10/10
Confidence
26%
Reports
84
Location
PT
PT