Elevated Risk
Elevated threat level 7/10 for IP 217.154.36.120 from 12 reported incidents.
Behavioral profile indicates cyber threat activity with 11% confidence.
More threatening than 55% of monitored IPs
IP Address
217.154.36.120
IPv4
Public
GB
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
GB
Location
IONOS SE
ASN 8560
12
Reports
Community
Data Source
Threat Categories
Hacking
6
WP XML-RPC Brute Force
6
Brute-Force
6
WP Login Brute Force
6
DDoS Attack
4
WP Cron Abuse
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Moderate Network Risk
The network hosting this IP (ASN 8560, operated by IONOS SE) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
8%
Low Confidence
Confidence History
19. Feb 2026 - 21. Feb 2026
11%
Current
Stable
Trend
Security Reports (12)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force WP Resource Exhaustion +1 | Community x2 | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking WP Login Brute Force +3 | Community x3 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Cron Abuse DDoS Attack WP Login Brute Force +1 | Community x2 | 75% |
Technical Details
Basic Information
- IP Address
- 217.154.36.120
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
GB
- ASN
- AS8560
- ISP
- IONOS SE
DNS Information
- Reverse DNS
- ip217.154.36-120.pbiaas.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 12
- First Reported
- 19 Feb 2026
- Last Reported
- 21 Feb 2026, 23:28
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8560
IONOS SE
ES
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
464
Total IPs Monitored
29,122
Total Reports
62.8
Reports per IP
Network Context
This IP address belongs to IONOS SE (AS8560), which manages 464 IP addresses in our monitoring system. Out of these, 29,122 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
55
%
Global Threat Ranking
This IP is more threatening than 55% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,753 reported IPs worldwide
Threat Level
7/10
avg: 5.3
+
Total Reports
12
avg: 23
-
Network Comparison
Compared against 531 IPs in ASN 8560
Threat Level
7/10
network avg: 5.6
+
Total Reports
12
network avg: 64
--
Network IONOS SE has overall threat level 5/10
Geographic Comparison
Compared against 4,299 IPs in GB
Threat Level
7/10
country avg: 5.4
+
Total Reports
12
country avg: 27
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
6
Brute-Force
6
WP XML-RPC Brute Force
6
Hacking
6
DDoS Attack
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
213.171.208.232
8/10
Confidence
100%
Reports
135
Location
GB
GB
213.171.208.62
8/10
Confidence
100%
Reports
122
Location
GB
GB
82.223.24.195
8/10
Confidence
100%
Reports
117
Location
ES
ES
87.106.29.151
10/10
Confidence
100%
Reports
50
Location
FR
FR
87.106.67.224
8/10
Confidence
100%
Reports
31
Location
GB
GB
82.165.2.98
8/10
Confidence
100%
Reports
26
Location
ES
ES
217.76.158.60
10/10
Confidence
100%
Reports
23
Location
ES
ES
194.164.193.194
10/10
Confidence
100%
Reports
20
Location
DE
DE
77.68.30.172
10/10
Confidence
100%
Reports
17
Location
GB
GB
198.251.71.113
8/10
Confidence
99%
Reports
57
Location
US
US
185.230.219.29
10/10
Confidence
99%
Reports
51
Location
AT
AT
185.249.74.198
10/10
Confidence
99%
Reports
45
Location
AT
AT
217.160.226.51
10/10
Confidence
99%
Reports
37
Location
ES
ES
94.143.141.37
10/10
Confidence
99%
Reports
29
Location
ES
ES
109.228.50.118
8/10
Confidence
98%
Reports
35
Location
GB
GB
85.215.36.85
10/10
Confidence
98%
Reports
12
Location
DE
DE
212.227.80.34
8/10
Confidence
97%
Reports
30
Location
FR
FR
65.38.97.199
8/10
Confidence
97%
Reports
25
Location
US
US
74.208.113.217
8/10
Confidence
97%
Reports
20
Location
US
US
82.165.2.172
8/10
Confidence
97%
Reports
14
Location
ES
ES
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.196.9.127
8/10
Confidence
100%
Reports
157
ISP
Global-Data Sys...
213.171.208.232
8/10
Confidence
100%
Reports
135
ISP
IONOS SE
213.171.208.62
8/10
Confidence
100%
Reports
122
ISP
IONOS SE
62.232.51.140
8/10
Confidence
100%
Reports
107
ISP
Wavenet Limited
198.38.94.18
10/10
Confidence
100%
Reports
92
ISP
WHG Hosting Ser...
198.38.94.14
10/10
Confidence
100%
Reports
78
ISP
WHG Hosting Ser...
209.42.20.53
8/10
Confidence
100%
Reports
52
ISP
WHG Hosting Ser...
167.71.136.93
10/10
Confidence
100%
Reports
39
ISP
DigitalOcean, LLC
87.106.67.224
8/10
Confidence
100%
Reports
31
ISP
IONOS SE
64.89.160.178
8/10
Confidence
100%
Reports
29
ISP
Ghosty Networks...
94.76.235.103
10/10
Confidence
100%
Reports
27
ISP
Team Blue Carri...
77.68.30.172
10/10
Confidence
100%
Reports
17
ISP
IONOS SE
2.27.36.16
10/10
Confidence
100%
Reports
14
ISP
DpkgSoft Intern...
37.143.61.60
10/10
Confidence
100%
Reports
12
ISP
UK Dedicated Se...
34.39.58.191
8/10
Confidence
99%
Reports
108
ISP
GOOGLE-CLOUD-PL...
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
11%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
109.70.100.5
7/10
Confidence
11%
Reports
57
Location
AT
AT
95.85.238.20
7/10
Confidence
11%
Reports
53
Location
CZ
CZ
46.224.215.94
8/10
Confidence
11%
Reports
51
Location
DE
DE
185.220.101.10
7/10
Confidence
11%
Reports
43
Location
DE
DE
87.120.126.236
7/10
Confidence
11%
Reports
32
Location
DE
DE
83.217.208.173
7/10
Confidence
11%
Reports
30
Location
RU
RU
192.0.86.182
8/10
Confidence
11%
Reports
24
Location
US
US
185.220.101.22
7/10
Confidence
11%
Reports
24
Location
DE
DE
45.13.225.78
7/10
Confidence
11%
Reports
18
Location
DE
DE
171.25.193.35
7/10
Confidence
11%
Reports
18
Location
SE
SE
220.158.232.245
7/10
Confidence
11%
Reports
15
Location
KH
KH
217.154.180.55
8/10
Confidence
11%
Reports
13
Location
ES
ES
212.42.58.120
8/10
Confidence
11%
Reports
13
Location
RU
RU
160.187.210.194
8/10
Confidence
11%
Reports
12
Location
MY
MY
87.106.44.42
7/10
Confidence
11%
Reports
12
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203