Critical Alert
Security alert: 109.94.96.211 rated 10/10 based on 31 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 99% of monitored IPs
IP Address
109.94.96.211
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Germany
Location
Latitude.sh
ASN 396356
31
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
Web App Attack
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
1. August 2026
Last Activity
14. August 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 396356) with generally good reputation. The ISP Latitude.sh maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
92%
Verified
Confidence History
3. Jul 2026 - 14. Aug 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Web App Attack | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 109.94.96.211
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS396356
- ISP
- Latitude.sh
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 31
- First Reported
- 3 Jul 2026
- Last Reported
- 14 Aug 2026, 21:46
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS396356
Latitude.sh
MX
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
225
Total IPs Monitored
2,277
Total Reports
10.1
Reports per IP
Network Context
This IP address belongs to Latitude.sh (AS396356), which manages 225 IP addresses in our monitoring system. Out of these, 2,277 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 682,956 reported IPs worldwide
Threat Level
10/10
avg: 5.7
++
Total Reports
31
avg: 9
++
Network Comparison
Compared against 3,191 IPs in ASN 396356
Threat Level
10/10
network avg: 6.5
++
Total Reports
31
network avg: 5
++
Network Latitude.sh has overall threat level 2/10
Geographic Comparison
Compared against 12,577 IPs in DE
Threat Level
10/10
country avg: 6.5
++
Total Reports
31
country avg: 41
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Aug 2026
5 reports
Daily Average
0.4
reports/day
Most Active
Friday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
30
Web App Attack
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
568,349 threat incidents tracked globally • Last 24h: 125,682 Logs
FEED
Top Threat Sources
-
01
United States112,554 19.8% -
02
Brazil101,685 17.9%
-
03
India60,789 10.7%
-
04
China39,381 6.9%
-
05
Argentina14,481 2.5%
-
06
Colombia14,236 2.5%
-
07
Germany12,576 2.2%
-
08
SC11,629 2%
-
09
Pakistan11,299 2%
-
10
Russia10,840 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
172.98.33.66
8/10
Confidence
100%
Reports
15
Location
US
US
185.223.152.143
10/10
Confidence
100%
Reports
13
Location
US
US
185.223.152.140
10/10
Confidence
100%
Reports
13
Location
US
US
185.223.152.249
10/10
Confidence
100%
Reports
12
Location
US
US
172.98.33.33
8/10
Confidence
99%
Reports
13
Location
US
US
172.98.33.61
8/10
Confidence
99%
Reports
13
Location
US
US
185.223.152.135
10/10
Confidence
99%
Reports
12
Location
US
US
185.223.152.122
10/10
Confidence
99%
Reports
12
Location
US
US
45.132.115.84
8/10
Confidence
98%
Reports
12
Location
US
US
45.132.115.88
8/10
Confidence
98%
Reports
12
Location
US
US
185.223.152.87
10/10
Confidence
97%
Reports
12
Location
US
US
45.134.9.27
10/10
Confidence
96%
Reports
64
Location
MX
MX
172.98.33.117
8/10
Confidence
96%
Reports
16
Location
US
US
172.98.33.35
8/10
Confidence
96%
Reports
11
Location
US
US
185.223.152.139
10/10
Confidence
96%
Reports
10
Location
US
US
172.98.33.29
8/10
Confidence
95%
Reports
12
Location
US
US
172.98.33.64
8/10
Confidence
95%
Reports
11
Location
US
US
136.144.35.130
8/10
Confidence
95%
Reports
11
Location
US
US
206.223.228.229
10/10
Confidence
94%
Reports
24
Location
US
US
103.219.170.37
10/10
Confidence
94%
Reports
20
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
134
ISP
Hetzner Online ...
164.92.161.148
10/10
Confidence
100%
Reports
129
ISP
DigitalOcean, LLC
148.251.47.87
8/10
Confidence
100%
Reports
114
ISP
Hetzner Online ...
94.26.106.216
8/10
Confidence
100%
Reports
109
ISP
dataforest GmbH
89.58.31.106
10/10
Confidence
100%
Reports
106
ISP
netcup GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
217.160.212.27
8/10
Confidence
100%
Reports
76
ISP
IONOS SE
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
83.169.38.142
10/10
Confidence
100%
Reports
63
ISP
Host Europe GmbH
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
176.65.148.84
10/10
Confidence
94%
Reports
4,943
Location
NL
NL
45.198.224.18
10/10
Confidence
94%
Reports
4,053
Location
US
US
5.187.35.26
8/10
Confidence
94%
Reports
3,724
Location
NL
NL
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
192.161.49.2
8/10
Confidence
94%
Reports
3,209
Location
US
US
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
5.187.35.142
8/10
Confidence
94%
Reports
3,018
Location
NL
NL
66.163.122.211
10/10
Confidence
94%
Reports
2,988
Location
US
US
177.125.137.18
10/10
Confidence
94%
Reports
2,963
Location
MX
MX
45.205.1.110
10/10
Confidence
94%
Reports
2,318
Location
US
US
87.251.64.159
10/10
Confidence
94%
Reports
2,236
Location
US
US
45.198.224.15
10/10
Confidence
94%
Reports
2,064
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 185.246.128.133
- 66.132.172.175
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.162
- 66.132.172.167
- 66.132.172.174
- 66.132.172.172
- 66.132.172.161
- 66.132.172.168
- 66.132.172.173
- 66.132.172.171
- 66.132.172.170
- 66.132.172.166
- 66.132.172.169
- 66.132.172.163
- 193.32.162.28
- 80.94.92.183
- 207.90.244.11
- 176.65.148.84
- 85.215.239.226
- 46.151.178.13