Elevated Risk
Elevated threat level 8/10 for IP 92.112.127.220 from 5 reported incidents.
Behavioral profile indicates cyber threat activity with 57% confidence.
More threatening than 88% of monitored IPs
IP Address
92.112.127.220
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
The Netherlands
Location
DELUXHOST
ASN 214677
5
Reports
Honeypot
Data Source
Threat Categories
SSH
5
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
4. September 2026
Last Activity
20. September 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 214677) with generally good reputation. The ISP DELUXHOST maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
55%
High Confidence
Confidence History
4. Sep 2026 - 20. Sep 2026
57%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 92.112.127.220
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS214677
- ISP
- DELUXHOST
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 4 Sep 2026
- Last Reported
- 20 Sep 2026, 17:41
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 776,302 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
5
avg: 9
-
Network Comparison
Compared against 12 IPs in ASN 214677
Threat Level
8/10
network avg: 7.8
=
Total Reports
5
network avg: 7
-
Geographic Comparison
Compared against 16,641 IPs in NL
Threat Level
8/10
country avg: 5.9
+
Total Reports
5
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
4 Sep 2026
1 reports
Daily Average
0.2
reports/day
Most Active
Sunday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
706,207 threat incidents tracked globally • Last 24h: 49,435 Logs
FEED
Top Threat Sources
-
01
United States137,398 19.5% -
02
Brazil109,686 15.5%
-
03
India76,939 10.9%
-
04
China43,467 6.2%
-
05
SC29,201 4.1%
-
06
Netherlands16,641 2.4%
-
07
Germany16,160 2.3%
-
08
Argentina16,090 2.3%
-
09
Pakistan15,492 2.2%
-
10
Colombia15,085 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
11
Related IPs
7.7/10
Avg Threat
57%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
82.39.86.153
10/10
Confidence
98%
Reports
19
Location
NL
NL
45.9.2.137
5/10
Confidence
93%
Reports
11
Location
CY
CY
92.112.126.183
10/10
Confidence
83%
Reports
25
Location
NL
NL
162.141.92.192
8/10
Confidence
77%
Reports
5
Location
NL
NL
31.56.233.141
8/10
Confidence
73%
Reports
9
Location
NL
NL
195.206.234.108
10/10
Confidence
62%
Reports
5
Location
NL
NL
62.84.172.151
7/10
Confidence
38%
Reports
2
Location
NL
NL
96.62.250.161
7/10
Confidence
30%
Reports
1
Location
NL
NL
96.62.250.179
7/10
Confidence
30%
Reports
1
Location
NL
NL
96.62.250.119
7/10
Confidence
30%
Reports
1
Location
NL
NL
95.135.208.24
6/10
Confidence
15%
Reports
2
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.242.3.195
10/10
Confidence
100%
Reports
601
ISP
Netiface Limited
45.148.10.204
8/10
Confidence
100%
Reports
509
ISP
Techoff Srv Lim...
188.166.95.31
10/10
Confidence
100%
Reports
81
ISP
DigitalOcean, LLC
94.154.43.203
8/10
Confidence
100%
Reports
80
ISP
Storm Industrie...
213.176.16.100
10/10
Confidence
100%
Reports
54
ISP
Global Connecti...
77.239.124.102
10/10
Confidence
100%
Reports
50
ISP
Banatsync Srl
45.148.10.51
10/10
Confidence
100%
Reports
48
ISP
Techoff Srv Lim...
185.70.185.130
8/10
Confidence
100%
Reports
41
ISP
Hostkey B.v.
85.11.167.132
10/10
Confidence
100%
Reports
32
ISP
TechTies Inc.
213.111.144.104
8/10
Confidence
100%
Reports
29
ISP
SOLLUTIUM EU Sp...
45.148.10.249
10/10
Confidence
100%
Reports
27
ISP
Techoff Srv Lim...
83.83.112.125
10/10
Confidence
100%
Reports
27
ISP
Vodafone Libert...
20.224.168.82
10/10
Confidence
100%
Reports
24
ISP
Microsoft Corpo...
194.26.192.89
8/10
Confidence
100%
Reports
22
ISP
1337 Services GmbH
85.11.167.175
8/10
Confidence
100%
Reports
20
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
7.7/10
Avg Threat
57%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
91.92.240.37
5/10
Confidence
57%
Reports
3,444
Location
DE
DE
89.213.174.247
5/10
Confidence
57%
Reports
393
Location
RO
RO
188.166.127.118
8/10
Confidence
57%
Reports
261
Location
NL
NL
158.94.209.8
7/10
Confidence
57%
Reports
253
Location
NL
NL
122.3.88.147
10/10
Confidence
57%
Reports
203
Location
PH
PH
15.235.28.124
8/10
Confidence
57%
Reports
146
Location
CA
CA
188.166.109.145
10/10
Confidence
57%
Reports
136
Location
NL
NL
77.83.39.128
8/10
Confidence
57%
Reports
97
Location
DE
DE
68.183.16.91
10/10
Confidence
57%
Reports
79
Location
US
US
185.220.100.240
8/10
Confidence
57%
Reports
69
Location
DE
DE
62.164.177.224
8/10
Confidence
57%
Reports
59
Location
NL
NL
103.110.127.136
8/10
Confidence
57%
Reports
57
Location
IN
IN
185.220.100.252
8/10
Confidence
57%
Reports
56
Location
DE
DE
213.209.157.229
5/10
Confidence
57%
Reports
45
Location
DE
DE
45.149.173.225
8/10
Confidence
57%
Reports
44
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.164
- 66.132.172.162
- 66.132.172.165
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26