Elevated Risk
Elevated threat level 7/10 for IP 89.117.104.53 from 5 reported incidents.
Behavioral profile indicates cyber threat activity with 18% confidence.
More threatening than 78% of monitored IPs
IP Address
89.117.104.53
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
Cyberzone S.A.
ASN 209854
5
Reports
Community
Data Source
Threat Categories
WP Version Scanning
3
WP Plugin Scanning
3
WP Config Exposure
3
Brute-Force
2
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 days indicates persistent threat actor operations.
First Observed
4. September 2026
Last Activity
8. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 209854, operated by Cyberzone S.A.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
16%
Low Confidence
Confidence History
4. Jun 2026 - 8. Sep 2026
18%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 89.117.104.53
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS209854
- ISP
- Cyberzone S.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 4 Jun 2026
- Last Reported
- 8 Sep 2026, 04:29
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS209854
Cyberzone S.A.
US
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
102
Total IPs Monitored
399
Total Reports
3.9
Reports per IP
Network Context
This IP address belongs to Cyberzone S.A. (AS209854), which manages 102 IP addresses in our monitoring system. Out of these, 399 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 812,508 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
5
avg: 9
-
Network Comparison
Compared against 237 IPs in ASN 209854
Threat Level
7/10
network avg: 7.7
=
Total Reports
5
network avg: 4
+
Network Cyberzone S.A. has overall threat level 4/10
Geographic Comparison
Compared against 17,714 IPs in DE
Threat Level
7/10
country avg: 7.3
=
Total Reports
5
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
4 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Friday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Plugin Scanning
3
WP Version Scanning
3
WP Config Exposure
3
Brute-Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
738,709 threat incidents tracked globally • Last 24h: 42,964 Logs
FEED
Top Threat Sources
-
01
United States144,431 19.6% -
02
Brazil111,033 15%
-
03
India83,095 11.2%
-
04
China45,086 6.1%
-
05
SC29,242 4%
-
06
Germany17,714 2.4%
-
07
Netherlands17,571 2.4%
-
08
Pakistan16,879 2.3%
-
09
Argentina16,210 2.2%
-
10
Colombia15,148 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
51%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
89.117.46.54
10/10
Confidence
94%
Reports
33
Location
BA
BA
86.38.102.9
10/10
Confidence
82%
Reports
20
Location
AU
AU
86.38.102.7
10/10
Confidence
77%
Reports
17
Location
AU
AU
62.197.152.84
10/10
Confidence
67%
Reports
12
Location
AD
AD
89.117.104.46
8/10
Confidence
51%
Reports
5
Location
DE
DE
86.38.102.14
10/10
Confidence
50%
Reports
11
Location
AU
AU
172.216.252.21
10/10
Confidence
50%
Reports
6
Location
US
US
86.38.102.11
10/10
Confidence
47%
Reports
9
Location
AU
AU
172.216.11.16
10/10
Confidence
47%
Reports
7
Location
US
US
86.38.102.21
10/10
Confidence
46%
Reports
12
Location
AU
AU
172.216.245.43
10/10
Confidence
45%
Reports
3
Location
HK
HK
172.216.11.43
10/10
Confidence
44%
Reports
5
Location
US
US
172.216.11.28
10/10
Confidence
43%
Reports
5
Location
US
US
172.216.252.33
10/10
Confidence
42%
Reports
4
Location
US
US
172.216.11.8
10/10
Confidence
41%
Reports
6
Location
US
US
93.185.162.149
8/10
Confidence
41%
Reports
3
Location
ID
ID
89.117.104.31
8/10
Confidence
40%
Reports
7
Location
DE
DE
172.216.11.21
10/10
Confidence
40%
Reports
4
Location
US
US
172.216.11.33
10/10
Confidence
40%
Reports
3
Location
US
US
172.216.11.11
10/10
Confidence
39%
Reports
4
Location
US
US
IPs from the same subnet range, likely same network segment.
18
Related IPs
7.1/10
Avg Threat
24%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
89.117.104.46
8/10
Confidence
51%
Reports
5
Location
DE
DE
89.117.104.31
8/10
Confidence
40%
Reports
7
Location
DE
DE
89.117.104.33
8/10
Confidence
33%
Reports
6
Location
DE
DE
89.117.104.21
8/10
Confidence
27%
Reports
3
Location
DE
DE
89.117.104.28
8/10
Confidence
26%
Reports
4
Location
DE
DE
89.117.104.16
7/10
Confidence
23%
Reports
5
Location
DE
DE
89.117.104.8
10/10
Confidence
23%
Reports
3
Location
DE
DE
89.117.104.43
6/10
Confidence
23%
Reports
2
Location
DE
DE
89.117.104.36
6/10
Confidence
23%
Reports
1
Location
DE
DE
89.117.104.41
6/10
Confidence
23%
Reports
1
Location
DE
DE
89.117.104.26
6/10
Confidence
23%
Reports
1
Location
DE
DE
89.117.104.18
7/10
Confidence
22%
Reports
9
Location
DE
DE
89.117.104.51
7/10
Confidence
21%
Reports
4
Location
DE
DE
89.117.104.6
7/10
Confidence
21%
Reports
3
Location
DE
DE
89.117.104.48
7/10
Confidence
20%
Reports
3
Location
DE
DE
89.117.104.11
6/10
Confidence
16%
Reports
2
Location
DE
DE
89.117.104.23
6/10
Confidence
14%
Reports
2
Location
DE
DE
89.117.104.38
6/10
Confidence
0%
Reports
2
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
844
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
38
ISP
TechTies Inc.
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
27
ISP
netcup GmbH
5.175.206.193
8/10
Confidence
100%
Reports
20
ISP
AltunHOST LTD
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
151.243.113.84
8/10
Confidence
100%
Reports
13
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
13
ISP
Clouvider Limited
138.201.205.59
8/10
Confidence
99%
Reports
17
ISP
Hetzner Online ...
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
94.26.106.73
10/10
Confidence
99%
Reports
12
ISP
TechTies Inc.
136.92.18.166
8/10
Confidence
98%
Reports
28
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
18%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
160.119.71.136
10/10
Confidence
18%
Reports
1,604
Location
SC
SC
62.60.130.169
7/10
Confidence
18%
Reports
1,527
Location
IR
IR
80.94.92.120
5/10
Confidence
18%
Reports
399
Location
RO
RO
35.241.166.201
10/10
Confidence
18%
Reports
344
Location
BE
BE
5.255.97.209
10/10
Confidence
18%
Reports
301
Location
NL
NL
35.233.42.65
10/10
Confidence
18%
Reports
298
Location
BE
BE
180.95.152.53
10/10
Confidence
18%
Reports
283
Location
CN
CN
76.150.167.171
10/10
Confidence
18%
Reports
277
Location
US
US
183.62.127.90
10/10
Confidence
18%
Reports
255
Location
CN
CN
103.158.206.141
10/10
Confidence
18%
Reports
195
Location
BD
BD
112.11.230.160
10/10
Confidence
18%
Reports
172
Location
CN
CN
34.53.192.169
10/10
Confidence
18%
Reports
172
Location
BE
BE
31.24.44.107
8/10
Confidence
18%
Reports
148
Location
ES
ES
35.240.3.145
10/10
Confidence
18%
Reports
148
Location
BE
BE
111.26.79.159
10/10
Confidence
18%
Reports
144
Location
CN
CN