Substantial Risk
Threat level 8/10 for 89.117.42.126 based on 9 documented incidents.
Consistent suspicious behavior patterns. 55% confidence rating.
More threatening than 77% of monitored IPs
IP Address
89.117.42.126
IPv4
Public
TW
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Taiwan
Location
Cyberzone S.A.
ASN 209854
9
Reports
Mixed
Data Source
Threat Categories
Brute-Force
8
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 5 days indicates persistent threat actor operations.
First Observed
28. May 2026
Last Activity
2. June 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 209854, operated by Cyberzone S.A.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
48%
Medium Confidence
Confidence History
28. May 2026 - 2. Jun 2026
55%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 89.117.42.126
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
TW
- ASN
- AS209854
- ISP
- Cyberzone S.A.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 9
- First Reported
- 28 May 2026
- Last Reported
- 2 Jun 2026, 20:05
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS209854
Cyberzone S.A.
US
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
102
Total IPs Monitored
399
Total Reports
3.9
Reports per IP
Network Context
This IP address belongs to Cyberzone S.A. (AS209854), which manages 102 IP addresses in our monitoring system. Out of these, 399 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
77
%
Global Threat Ranking
This IP is more threatening than 77% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,856 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
9
avg: 23
--
Network Comparison
Compared against 157 IPs in ASN 209854
Threat Level
8/10
network avg: 5.5
+
Total Reports
9
network avg: 4
++
Network Cyberzone S.A. has overall threat level 4/10
Geographic Comparison
Compared against 1,196 IPs in TW
Threat Level
8/10
country avg: 4.5
++
Total Reports
9
country avg: 15
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 May 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Monday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
8
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,519 threat incidents tracked globally • Last 24h: 18,988 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5%
-
02
India29,193 15.6% -
03
China26,036 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
68%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
172.216.246.36
10/10
Confidence
94%
Reports
42
Location
BA
BA
172.216.246.54
10/10
Confidence
93%
Reports
17
Location
BA
BA
172.216.246.38
10/10
Confidence
89%
Reports
12
Location
BA
BA
23.27.109.54
10/10
Confidence
86%
Reports
44
Location
US
US
62.197.152.68
10/10
Confidence
72%
Reports
18
Location
AD
AD
23.27.109.38
10/10
Confidence
71%
Reports
22
Location
US
US
23.27.109.36
10/10
Confidence
69%
Reports
34
Location
US
US
93.152.220.248
0/10
Confidence
65%
Reports
4
Location
US
US
93.152.210.167
10/10
Confidence
64%
Reports
9
Location
US
US
23.27.109.52
10/10
Confidence
63%
Reports
11
Location
US
US
93.152.210.0
10/10
Confidence
62%
Reports
9
Location
US
US
93.152.220.232
10/10
Confidence
62%
Reports
9
Location
US
US
172.216.252.23
10/10
Confidence
60%
Reports
7
Location
US
US
64.79.232.68
10/10
Confidence
60%
Reports
7
Location
US
US
86.38.102.5
10/10
Confidence
60%
Reports
5
Location
AU
AU
82.21.109.6
10/10
Confidence
59%
Reports
5
Location
AU
AU
82.140.187.41
8/10
Confidence
57%
Reports
6
Location
TW
TW
82.21.109.8
10/10
Confidence
57%
Reports
6
Location
AU
AU
93.152.220.246
10/10
Confidence
55%
Reports
9
Location
US
US
93.152.220.171
10/10
Confidence
55%
Reports
7
Location
US
US
IPs from the same subnet range, likely same network segment.
1
Related IPs
6/10
Avg Threat
23%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
111.70.30.7
10/10
Confidence
100%
Reports
59
ISP
Mobile Business...
103.229.125.106
10/10
Confidence
100%
Reports
34
ISP
Overcasts Limited
213.209.159.227
10/10
Confidence
98%
Reports
162
ISP
Feo Prest SRL
213.209.159.226
8/10
Confidence
98%
Reports
138
ISP
Feo Prest SRL
213.209.159.223
10/10
Confidence
98%
Reports
20
ISP
Feo Prest SRL
213.209.159.229
10/10
Confidence
98%
Reports
19
ISP
Feo Prest SRL
165.154.227.8
10/10
Confidence
98%
Reports
13
ISP
Scloud Pte Ltd
213.209.159.63
8/10
Confidence
97%
Reports
51
ISP
Feo Prest SRL
106.1.179.116
8/10
Confidence
97%
Reports
41
ISP
kbro CO. Ltd.
123.204.25.180
8/10
Confidence
97%
Reports
40
ISP
Digital United ...
218.211.33.134
8/10
Confidence
97%
Reports
26
ISP
New Century Inf...
34.80.97.94
8/10
Confidence
97%
Reports
22
ISP
GOOGLE-CLOUD-PL...
114.35.59.237
10/10
Confidence
97%
Reports
19
ISP
Data Communicat...
61.219.156.91
10/10
Confidence
97%
Reports
14
ISP
Data Communicat...
213.209.159.175
10/10
Confidence
96%
Reports
110
ISP
Feo Prest SRL
IPs with similar threat level and confidence scores.
15
Related IPs
5.3/10
Avg Threat
55%
Avg Confidence
2
High Threat
196.251.92.134
7/10
Confidence
55%
Reports
75,414
Location
NL
NL
155.94.155.105
5/10
Confidence
55%
Reports
19,539
Location
US
US
213.209.157.165
5/10
Confidence
55%
Reports
11,629
Location
DE
DE
45.144.212.19
5/10
Confidence
55%
Reports
9,796
Location
UA
UA
213.209.157.87
5/10
Confidence
55%
Reports
9,465
Location
DE
DE
213.209.157.54
5/10
Confidence
55%
Reports
7,881
Location
DE
DE
185.196.11.84
5/10
Confidence
55%
Reports
2,841
Location
CH
CH
213.209.157.207
5/10
Confidence
55%
Reports
2,510
Location
DE
DE
78.153.140.207
7/10
Confidence
55%
Reports
2,224
Location
GB
GB
185.196.11.30
5/10
Confidence
55%
Reports
1,710
Location
CH
CH
196.251.72.5
5/10
Confidence
55%
Reports
1,619
Location
SC
SC
213.209.157.154
5/10
Confidence
55%
Reports
1,532
Location
DE
DE
196.251.83.16
5/10
Confidence
55%
Reports
1,531
Location
SC
SC
213.209.157.216
5/10
Confidence
55%
Reports
1,498
Location
DE
DE
213.209.157.201
5/10
Confidence
55%
Reports
1,497
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203