Notable Threat
IP 87.106.70.198 rated 8/10 from 17 verified reports.
Multiple security incidents attributed to this IP. Confidence: 98%.
More threatening than 82% of monitored IPs
IP Address
87.106.70.198
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
IONOS SE
ASN 8560
17
Reports
Mixed
Data Source
Threat Categories
Hacking
17
DDoS Attack
7
Brute-Force
7
WP Login Brute Force
6
Port Scan
3
WP XML-RPC Brute Force
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
29. May 2026
Last Activity
13. June 2026
Recent (7 days)
15 incidents
Moderate Network Risk
The network hosting this IP (ASN 8560, operated by IONOS SE) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
98%
Verified
Confidence History
29. May 2026 - 13. Jun 2026
98%
Current
Stable
Trend
Security Reports (17)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking DDoS Attack | Community | 75% |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Plugin Exploit +1 | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 87.106.70.198
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS8560
- ISP
- IONOS SE
DNS Information
- Reverse DNS
- ip87-106-70-198.pbiaas.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 17
- First Reported
- 29 May 2026
- Last Reported
- 13 Jun 2026, 17:59
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8560
IONOS SE
ES
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
464
Total IPs Monitored
29,122
Total Reports
62.8
Reports per IP
Network Context
This IP address belongs to IONOS SE (AS8560), which manages 464 IP addresses in our monitoring system. Out of these, 29,122 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 209,012 reported IPs worldwide
Threat Level
8/10
avg: 5.4
+
Total Reports
17
avg: 22
-
Network Comparison
Compared against 563 IPs in ASN 8560
Threat Level
8/10
network avg: 5.8
+
Total Reports
17
network avg: 66
--
Network IONOS SE has overall threat level 5/10
Geographic Comparison
Compared against 7,417 IPs in DE
Threat Level
8/10
country avg: 5.9
+
Total Reports
17
country avg: 59
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Jun 2026
5 reports
Daily Average
0.6
reports/day
Most Active
Monday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
17
Brute-Force
7
DDoS Attack
7
WP Login Brute Force
6
Port Scan
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
196,067 threat incidents tracked globally • Last 24h: 17,437 Logs
FEED
Top Threat Sources
-
01
United States40,079 20.4% -
02
India31,283 16% -
03
China26,706 13.6% -
04
Brazil10,642 5.4% -
05
Germany7,417 3.8%
-
06
Singapore6,672 3.4% -
07
Indonesia5,831 3% -
08
Pakistan5,068 2.6% -
09
Russia5,011 2.6% -
10
Netherlands4,563 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.9/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
213.171.208.62
8/10
Confidence
100%
Reports
158
Location
GB
GB
213.171.208.232
8/10
Confidence
100%
Reports
135
Location
GB
GB
82.223.24.195
8/10
Confidence
100%
Reports
117
Location
ES
ES
87.106.29.151
10/10
Confidence
100%
Reports
50
Location
FR
FR
82.165.2.98
8/10
Confidence
100%
Reports
40
Location
ES
ES
87.106.67.224
8/10
Confidence
100%
Reports
36
Location
GB
GB
217.76.158.60
10/10
Confidence
100%
Reports
23
Location
ES
ES
194.164.193.194
10/10
Confidence
100%
Reports
21
Location
DE
DE
77.68.30.172
10/10
Confidence
100%
Reports
17
Location
GB
GB
198.251.71.113
8/10
Confidence
99%
Reports
57
Location
US
US
185.230.219.29
10/10
Confidence
99%
Reports
51
Location
AT
AT
185.249.74.198
10/10
Confidence
99%
Reports
47
Location
AT
AT
217.160.226.51
10/10
Confidence
99%
Reports
37
Location
ES
ES
94.143.141.37
10/10
Confidence
99%
Reports
29
Location
ES
ES
109.228.50.118
8/10
Confidence
98%
Reports
35
Location
GB
GB
85.215.36.85
10/10
Confidence
98%
Reports
14
Location
DE
DE
212.227.80.34
8/10
Confidence
97%
Reports
30
Location
FR
FR
65.38.97.199
8/10
Confidence
97%
Reports
25
Location
US
US
212.132.120.41
8/10
Confidence
97%
Reports
23
Location
DE
DE
74.208.113.217
8/10
Confidence
97%
Reports
20
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
134
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
130
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
94
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
54
ISP
AltunHOST LTD
94.26.106.216
8/10
Confidence
100%
Reports
42
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.251.64.146
10/10
Confidence
98%
Reports
2,353
Location
US
US
193.32.162.35
10/10
Confidence
98%
Reports
992
Location
RO
RO
106.75.190.150
10/10
Confidence
98%
Reports
711
Location
CN
CN
85.11.167.7
10/10
Confidence
98%
Reports
569
Location
BG
BG
208.109.188.137
8/10
Confidence
98%
Reports
531
Location
US
US
103.189.234.69
8/10
Confidence
98%
Reports
445
Location
ID
ID
20.89.17.172
10/10
Confidence
98%
Reports
400
Location
JP
JP
77.90.185.37
8/10
Confidence
98%
Reports
382
Location
DE
DE
146.148.26.145
10/10
Confidence
98%
Reports
229
Location
BE
BE
4.194.133.126
10/10
Confidence
98%
Reports
220
Location
SG
SG
74.176.59.137
10/10
Confidence
98%
Reports
219
Location
JP
JP
4.213.160.187
10/10
Confidence
98%
Reports
204
Location
IN
IN
103.59.95.177
10/10
Confidence
98%
Reports
194
Location
ID
ID
181.23.107.93
10/10
Confidence
98%
Reports
192
Location
AR
AR
52.147.68.81
10/10
Confidence
98%
Reports
190
Location
JP
JP
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 51.68.207.118
- 176.65.149.64
- 193.32.162.28
- 80.94.92.183
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203