Elevated Risk
Elevated threat level 8/10 for IP 62.197.152.70 from 10 reported incidents.
Behavioral profile indicates cyber threat activity with 45% confidence.
More threatening than 76% of monitored IPs
IP Address
62.197.152.70
IPv4
Public
AD
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
AD
Location
Cyberzone S.A.
ASN 209854
10
Reports
Community
Data Source
Threat Categories
FTP Brute-Force
10
Technical Details
FTP brute-force attacks systematically attempt to guess FTP credentials to gain unauthorized file access.
Recommended Mitigations
Disable FTP in favor of SFTP, implement fail2ban, and enforce strong password policies.
Moderate Network Risk
The network hosting this IP (ASN 209854, operated by Cyberzone S.A.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
45%
Medium Confidence
Confidence History
21. Aug 2025
45%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% | |
| FTP Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 62.197.152.70
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
AD
- ASN
- AS209854
- ISP
- Cyberzone S.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 21 Aug 2025
- Last Reported
- 21 Aug 2025, 10:25
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS209854
Cyberzone S.A.
US
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
102
Total IPs Monitored
399
Total Reports
3.9
Reports per IP
Network Context
This IP address belongs to Cyberzone S.A. (AS209854), which manages 102 IP addresses in our monitoring system. Out of these, 399 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
76
%
Global Threat Ranking
This IP is more threatening than 76% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,978 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
10
avg: 23
--
Network Comparison
Compared against 157 IPs in ASN 209854
Threat Level
8/10
network avg: 5.5
+
Total Reports
10
network avg: 4
++
Network Cyberzone S.A. has overall threat level 4/10
Geographic Comparison
Compared against 15 IPs in AD
Threat Level
8/10
country avg: 5.7
+
Total Reports
10
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
FTP Brute-Force
10
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,879 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5%
-
02
India29,222 15.6% -
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
68%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
172.216.246.36
10/10
Confidence
94%
Reports
42
Location
BA
BA
172.216.246.54
10/10
Confidence
92%
Reports
17
Location
BA
BA
172.216.246.38
10/10
Confidence
89%
Reports
12
Location
BA
BA
23.27.109.54
10/10
Confidence
86%
Reports
44
Location
US
US
62.197.152.68
10/10
Confidence
72%
Reports
18
Location
AD
AD
23.27.109.38
10/10
Confidence
71%
Reports
22
Location
US
US
23.27.109.36
10/10
Confidence
69%
Reports
34
Location
US
US
93.152.220.248
0/10
Confidence
65%
Reports
4
Location
US
US
93.152.210.167
10/10
Confidence
64%
Reports
9
Location
US
US
23.27.109.52
10/10
Confidence
63%
Reports
11
Location
US
US
93.152.210.0
10/10
Confidence
62%
Reports
9
Location
US
US
93.152.220.232
10/10
Confidence
62%
Reports
9
Location
US
US
172.216.252.23
10/10
Confidence
60%
Reports
7
Location
US
US
64.79.232.68
10/10
Confidence
60%
Reports
7
Location
US
US
86.38.102.5
10/10
Confidence
60%
Reports
5
Location
AU
AU
82.21.109.6
10/10
Confidence
59%
Reports
5
Location
AU
AU
82.140.187.41
8/10
Confidence
57%
Reports
6
Location
TW
TW
82.21.109.8
10/10
Confidence
57%
Reports
6
Location
AU
AU
93.152.220.246
10/10
Confidence
55%
Reports
9
Location
US
US
89.117.42.126
8/10
Confidence
55%
Reports
9
Location
TW
TW
IPs from the same subnet range, likely same network segment.
8
Related IPs
5.9/10
Avg Threat
45%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
62.197.152.68
10/10
Confidence
72%
Reports
18
Location
AD
AD
62.197.152.196
10/10
Confidence
50%
Reports
6
Location
AD
AD
62.197.152.102
10/10
Confidence
46%
Reports
3
Location
AD
AD
62.197.152.84
0/10
Confidence
45%
Reports
3
Location
AD
AD
62.197.152.164
10/10
Confidence
42%
Reports
6
Location
AD
AD
62.197.152.148
0/10
Confidence
40%
Reports
2
Location
AD
AD
62.197.152.198
7/10
Confidence
35%
Reports
2
Location
AD
AD
62.197.152.182
0/10
Confidence
30%
Reports
1
Location
AD
AD
IPs from the same country with similar threat profiles.
14
Related IPs
5.6/10
Avg Threat
38%
Avg Confidence
6
High Threat
Elevated risk: Multiple related IPs are flagged
62.197.152.68
10/10
Confidence
72%
Reports
18
ISP
Cyberzone S.A.
62.197.152.196
10/10
Confidence
50%
Reports
6
ISP
Cyberzone S.A.
62.197.152.102
10/10
Confidence
46%
Reports
3
ISP
Cyberzone S.A.
62.197.152.84
0/10
Confidence
45%
Reports
3
ISP
Cyberzone S.A.
62.197.152.164
10/10
Confidence
42%
Reports
6
ISP
Cyberzone S.A.
62.197.152.148
0/10
Confidence
40%
Reports
2
ISP
Cyberzone S.A.
135.136.16.14
0/10
Confidence
39%
Reports
2
ISP
M247 Europe SRL
62.197.152.198
7/10
Confidence
35%
Reports
2
ISP
Cyberzone S.A.
85.94.182.95
7/10
Confidence
30%
Reports
1
ISP
Andorra Telecom...
62.197.152.182
0/10
Confidence
30%
Reports
1
ISP
Cyberzone S.A.
173.239.217.187
6/10
Confidence
29%
Reports
2
ISP
GSL Networks Pt...
173.239.217.31
6/10
Confidence
23%
Reports
1
ISP
GSL Networks Pt...
173.239.217.185
6/10
Confidence
22%
Reports
1
ISP
GSL Networks Pt...
173.239.217.184
6/10
Confidence
22%
Reports
1
ISP
GSL Networks Pt...
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
45%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
157.90.27.37
10/10
Confidence
45%
Reports
55
Location
DE
DE
185.220.100.240
10/10
Confidence
45%
Reports
51
Location
DE
DE
89.248.168.227
10/10
Confidence
45%
Reports
44
Location
NL
NL
45.149.173.193
8/10
Confidence
45%
Reports
37
Location
US
US
87.229.65.46
10/10
Confidence
45%
Reports
26
Location
HU
HU
80.76.49.197
8/10
Confidence
45%
Reports
18
Location
US
US
200.125.170.155
7/10
Confidence
45%
Reports
16
Location
DO
DO
89.191.226.161
10/10
Confidence
45%
Reports
16
Location
DE
DE
119.93.83.110
7/10
Confidence
45%
Reports
16
Location
PH
PH
43.248.74.3
7/10
Confidence
45%
Reports
16
Location
IN
IN
126.209.112.103
7/10
Confidence
45%
Reports
15
Location
PH
PH
126.209.112.110
7/10
Confidence
45%
Reports
14
Location
PH
PH
59.103.112.31
7/10
Confidence
45%
Reports
14
Location
PK
PK
185.220.101.32
10/10
Confidence
45%
Reports
14
Location
DE
DE
171.25.193.78
8/10
Confidence
45%
Reports
14
Location
SE
SE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203