Significant Threat
IP 104.152.49.21 identified as significant threat (8/10) from 13 events.
Multiple malicious indicators detected. Confidence level: 3%.
More threatening than 85% of monitored IPs
IP Address
104.152.49.21
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
DA International Group Lt...
ASN 203380
13
Reports
Honeypot
Data Source
Threat Categories
Hacking
9
Port Scan
8
WP XML-RPC Brute Force
8
WP Login Brute Force
5
Brute-Force
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 203380) with generally good reputation. The ISP DA International Group Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
3%
Low Confidence
Confidence History
5. May 2026 - 8. May 2026
3%
Current
Stable
Trend
Security Reports (13)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot x9 | 75% | |
| Port Scan WP XML-RPC Brute Force | Honeypot x10 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot x8 | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 104.152.49.21
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS203380
- ISP
- DA International Group Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 13
- First Reported
- 5 May 2026
- Last Reported
- 8 May 2026, 13:42
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 836,235 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
13
avg: 9
+
Network Comparison
Compared against 17 IPs in ASN 203380
Threat Level
8/10
network avg: 7.1
=
Total Reports
13
network avg: 3
++
Geographic Comparison
Compared against 18,507 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
13
country avg: 30
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
9
Port Scan
8
WP XML-RPC Brute Force
8
WP Login Brute Force
5
Brute-Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
760,208 threat incidents tracked globally • Last 24h: 30,914 Logs
FEED
Top Threat Sources
-
01
United States148,782 19.6% -
02
Brazil111,975 14.7%
-
03
India87,947 11.6%
-
04
China46,188 6.1%
-
05
SC29,254 3.8%
-
06
Germany18,507 2.4%
-
07
Netherlands18,064 2.4%
-
08
Pakistan17,963 2.4%
-
09
Argentina16,309 2.1%
-
10
Colombia15,183 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
16
Related IPs
7/10
Avg Threat
12%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
2602:fc16:2:76a::854d
6/10
Confidence
24%
Reports
1
Location
DE
DE
91.243.177.39
4/10
Confidence
23%
Reports
1
Location
DE
DE
91.243.177.4
4/10
Confidence
23%
Reports
1
Location
DE
DE
169.40.15.48
6/10
Confidence
23%
Reports
1
Location
DE
DE
94.72.140.6
7/10
Confidence
18%
Reports
1
Location
BG
BG
164.5.250.197
10/10
Confidence
17%
Reports
5
Location
DE
DE
164.5.250.20
7/10
Confidence
11%
Reports
2
Location
DE
DE
164.5.250.198
7/10
Confidence
11%
Reports
2
Location
DE
DE
164.5.249.95
7/10
Confidence
9%
Reports
1
Location
DE
DE
164.5.249.6
7/10
Confidence
9%
Reports
1
Location
DE
DE
31.22.10.193
8/10
Confidence
7%
Reports
4
Location
DE
DE
194.110.87.216
10/10
Confidence
7%
Reports
3
Location
BG
BG
13.140.25.94
8/10
Confidence
5%
Reports
4
Location
DE
DE
194.110.87.247
7/10
Confidence
4%
Reports
1
Location
BG
BG
176.126.78.131
7/10
Confidence
2%
Reports
1
Location
GB
GB
13.140.29.165
7/10
Confidence
2%
Reports
1
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,055
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
125
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
18
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
194.94.79.252
8/10
Confidence
100%
Reports
14
ISP
Verein zur Foer...
IPs with similar threat level and confidence scores.
15
Related IPs
5.9/10
Avg Threat
3%
Avg Confidence
165.22.55.210
5/10
Confidence
3%
Reports
2
Location
SG
SG
129.146.77.117
6/10
Confidence
3%
Reports
3
Location
US
US
39.56.52.139
6/10
Confidence
3%
Reports
2
Location
PK
PK
13.57.246.113
6/10
Confidence
3%
Reports
2
Location
US
US
39.56.66.199
6/10
Confidence
3%
Reports
2
Location
PK
PK
137.184.133.102
6/10
Confidence
3%
Reports
2
Location
US
US
139.59.77.124
6/10
Confidence
3%
Reports
2
Location
IN
IN
130.131.246.87
6/10
Confidence
3%
Reports
2
Location
US
US
136.67.111.31
5/10
Confidence
3%
Reports
2
Location
US
US
120.29.76.83
6/10
Confidence
3%
Reports
2
Location
PH
PH
104.197.239.0
6/10
Confidence
3%
Reports
2
Location
US
US
159.198.47.207
6/10
Confidence
3%
Reports
2
Location
US
US
85.203.39.233
6/10
Confidence
3%
Reports
2
Location
LV
LV
117.195.198.204
6/10
Confidence
3%
Reports
2
Location
IN
IN
51.223.102.138
6/10
Confidence
3%
Reports
2
Location
SA
SA