Elevated Risk
Elevated threat level 8/10 for IP 89.248.168.36 from 119 reported incidents.
Behavioral profile indicates cyber threat activity with 31% confidence.
More threatening than 75% of monitored IPs
IP Address
89.248.168.36
IPv4
Public
NL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
NL
Location
IP Volume inc
ASN 202425
119
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
8. June 2026
Recent (7 days)
6 incidents
Reputable Network
This IP is hosted on a network (ASN 202425) with generally good reputation. The ISP IP Volume inc maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
92%
Verified
Confidence History
10. May 2026 - 8. Jun 2026
31%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 89.248.168.36
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
NL
- ASN
- AS202425
- ISP
- IP Volume inc
DNS Information
- Reverse DNS
- no-reverse-dns-configured.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 119
- First Reported
- 15 Aug 2025
- Last Reported
- 8 Jun 2026, 09:11
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS202425
IP Volume inc
US
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
68
Total IPs Monitored
7,945
Total Reports
116.8
Reports per IP
Network Context
This IP address belongs to IP Volume inc (AS202425), which manages 68 IP addresses in our monitoring system. Out of these, 7,945 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
75
%
Global Threat Ranking
This IP is more threatening than 75% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,471 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
119
avg: 23
++
Network Comparison
Compared against 72 IPs in ASN 202425
Threat Level
8/10
network avg: 8.5
=
Total Reports
119
network avg: 163
-
Network IP Volume inc has overall threat level 3/10
Geographic Comparison
Compared against 4,356 IPs in NL
Threat Level
8/10
country avg: 6.0
+
Total Reports
119
country avg: 95
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 May 2026
1 reports
Daily Average
1
reports/day
Most Active
Tuesday
19 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
119
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 14 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5%
-
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
10/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
185.242.226.9
10/10
Confidence
96%
Reports
450
Location
US
US
185.242.226.11
10/10
Confidence
96%
Reports
237
Location
US
US
185.242.226.81
10/10
Confidence
95%
Reports
375
Location
US
US
185.242.226.72
10/10
Confidence
95%
Reports
334
Location
US
US
185.242.226.95
10/10
Confidence
94%
Reports
391
Location
US
US
185.242.226.90
10/10
Confidence
94%
Reports
379
Location
US
US
185.242.226.73
10/10
Confidence
94%
Reports
348
Location
US
US
185.242.226.61
10/10
Confidence
94%
Reports
213
Location
US
US
185.242.226.18
10/10
Confidence
94%
Reports
60
Location
US
US
185.242.226.74
10/10
Confidence
94%
Reports
37
Location
US
US
185.242.226.93
10/10
Confidence
94%
Reports
36
Location
US
US
80.82.70.228
10/10
Confidence
94%
Reports
22
Location
NL
NL
185.242.226.8
10/10
Confidence
93%
Reports
357
Location
US
US
185.242.226.60
10/10
Confidence
93%
Reports
308
Location
US
US
185.242.226.71
10/10
Confidence
93%
Reports
294
Location
US
US
185.242.226.87
10/10
Confidence
93%
Reports
131
Location
US
US
185.242.226.104
10/10
Confidence
92%
Reports
417
Location
US
US
185.242.226.10
10/10
Confidence
92%
Reports
311
Location
US
US
185.242.226.126
10/10
Confidence
92%
Reports
247
Location
US
US
185.242.226.85
10/10
Confidence
92%
Reports
225
Location
US
US
IPs from the same subnet range, likely same network segment.
3
Related IPs
8.3/10
Avg Threat
50%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
52.232.35.131
8/10
Confidence
100%
Reports
106
ISP
Microsoft Corpo...
158.94.210.72
8/10
Confidence
100%
Reports
77
ISP
Omegatech LTD
45.148.10.166
10/10
Confidence
100%
Reports
35
ISP
Techoff Srv Lim...
45.148.10.249
10/10
Confidence
100%
Reports
27
ISP
Techoff Srv Lim...
45.148.10.5
8/10
Confidence
100%
Reports
26
ISP
Techoff Srv Lim...
45.148.10.62
8/10
Confidence
100%
Reports
19
ISP
Techoff Srv Lim...
93.119.1.128
8/10
Confidence
100%
Reports
18
ISP
Signet B.V.
77.246.100.120
10/10
Confidence
100%
Reports
17
ISP
Servers Tech Fzco
20.224.168.82
10/10
Confidence
100%
Reports
16
ISP
Microsoft Corpo...
45.154.98.96
8/10
Confidence
100%
Reports
15
ISP
1337 Services GmbH
46.151.182.172
8/10
Confidence
100%
Reports
13
ISP
Ghosty Networks...
83.83.112.125
10/10
Confidence
100%
Reports
12
ISP
Vodafone Libert...
213.176.16.100
10/10
Confidence
99%
Reports
44
ISP
Global Connecti...
107.189.27.179
10/10
Confidence
99%
Reports
43
ISP
RouterHosting LLC
45.94.31.24
8/10
Confidence
99%
Reports
34
ISP
1337 Services GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.5/10
Avg Threat
31%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
91.231.89.50
7/10
Confidence
31%
Reports
144
Location
FR
FR
198.235.24.125
7/10
Confidence
31%
Reports
87
Location
US
US
50.6.174.25
8/10
Confidence
31%
Reports
42
Location
US
US
203.190.14.228
7/10
Confidence
31%
Reports
37
Location
BD
BD
2a09:bac1:b20:10::3c2:32
7/10
Confidence
31%
Reports
32
Location
BD
BD
185.220.101.8
8/10
Confidence
31%
Reports
29
Location
DE
DE
45.135.232.178
8/10
Confidence
31%
Reports
23
Location
RU
RU
142.93.129.190
8/10
Confidence
31%
Reports
18
Location
NL
NL
158.94.209.116
5/10
Confidence
31%
Reports
16
Location
NL
NL
20.238.121.35
8/10
Confidence
31%
Reports
14
Location
IE
IE
162.19.58.174
10/10
Confidence
31%
Reports
13
Location
FR
FR
2a03:2880:f814:14::
8/10
Confidence
31%
Reports
12
Location
US
US
146.70.194.254
7/10
Confidence
31%
Reports
12
Location
FR
FR
39.109.116.19
7/10
Confidence
31%
Reports
11
Location
HK
HK
2a09:bac1:b00:518::3c2:2f
7/10
Confidence
31%
Reports
11
Location
BD
BD
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203