Critical Alert
Security alert: 116.203.34.38 rated 10/10 based on 56 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 100% of monitored IPs
IP Address
116.203.34.38
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Germany
Location
Hetzner Online GmbH
ASN 24940
56
Reports
Honeypot
Data Source
Threat Categories
SSH
27
Hacking
25
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 days indicates persistent threat actor operations.
First Observed
2. October 2026
Last Activity
3. October 2026
Recent (7 days)
56 incidents
Datacenter Infrastructure
This IP is allocated from datacenter space operated by Hetzner Online GmbH. Datacenter IPs used for attacks often indicate intentional malicious infrastructure.
Purpose-provisioned attack infrastructure may represent more sophisticated threat actors.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
3. Oct 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | SSH | Honeypot | 75% |
| New | Exploited Host | Honeypot | 75% |
| New | SSH | Honeypot | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH | Honeypot | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | SSH | Honeypot | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 116.203.34.38
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS24940
- ISP
- Hetzner Online GmbH
DNS Information
- Reverse DNS
- static.38.34.203.116.clients.your-server.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 56
- First Reported
- 2 Oct 2026
- Last Reported
- 3 Oct 2026, 09:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24940
Hetzner Online GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
501
Total IPs Monitored
58,930
Total Reports
117.6
Reports per IP
Network Context
This IP address belongs to Hetzner Online GmbH (AS24940), which manages 501 IP addresses in our monitoring system. Out of these, 58,930 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 816,108 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
56
avg: 9
++
Network Comparison
Compared against 2,002 IPs in ASN 24940
Threat Level
10/10
network avg: 7.1
+
Total Reports
56
network avg: 39
+
Network Hetzner Online GmbH has overall threat level 2/10
Geographic Comparison
Compared against 17,811 IPs in DE
Threat Level
10/10
country avg: 7.3
+
Total Reports
56
country avg: 31
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Oct 2026
35 reports
Daily Average
1.9
reports/day
Most Active
Saturday
35 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
51
Hacking
48
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
741,701 threat incidents tracked globally • Last 24h: 34,989 Logs
FEED
Top Threat Sources
-
01
United States144,984 19.5% -
02
Brazil111,189 15%
-
03
India83,735 11.3%
-
04
China45,331 6.1%
-
05
SC29,243 3.9%
-
06
Germany17,811 2.4%
-
07
Netherlands17,617 2.4%
-
08
Pakistan17,046 2.3%
-
09
Argentina16,222 2.2%
-
10
Colombia15,153 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
87%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
138.201.205.59
8/10
Confidence
98%
Reports
17
Location
DE
DE
167.235.98.252
10/10
Confidence
96%
Reports
29
Location
DE
DE
65.21.239.164
10/10
Confidence
96%
Reports
17
Location
FI
FI
65.108.194.8
10/10
Confidence
96%
Reports
14
Location
FI
FI
49.12.0.144
8/10
Confidence
92%
Reports
11
Location
DE
DE
23.88.47.15
10/10
Confidence
90%
Reports
15
Location
DE
DE
144.76.32.117
6/10
Confidence
89%
Reports
148
Location
DE
DE
167.233.195.205
10/10
Confidence
89%
Reports
10
Location
DE
DE
2.28.235.95
8/10
Confidence
88%
Reports
10
Location
DE
DE
157.180.10.165
8/10
Confidence
88%
Reports
7
Location
FI
FI
178.105.31.42
8/10
Confidence
86%
Reports
10
Location
DE
DE
167.233.75.12
8/10
Confidence
82%
Reports
9
Location
DE
DE
2a01:4f8:271:188f::3
10/10
Confidence
81%
Reports
48
Location
DE
DE
138.201.159.109
10/10
Confidence
81%
Reports
34
Location
DE
DE
37.27.134.178
10/10
Confidence
80%
Reports
58
Location
FI
FI
176.9.105.121
10/10
Confidence
80%
Reports
51
Location
DE
DE
136.243.65.145
10/10
Confidence
80%
Reports
40
Location
DE
DE
138.201.58.132
10/10
Confidence
80%
Reports
22
Location
DE
DE
88.198.255.173
10/10
Confidence
79%
Reports
163
Location
DE
DE
178.63.234.222
10/10
Confidence
79%
Reports
49
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
870
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
38
ISP
TechTies Inc.
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
27
ISP
netcup GmbH
2a0f:ca80:b00b:8089::5
10/10
Confidence
100%
Reports
25
ISP
TechTies Inc.
5.175.206.193
8/10
Confidence
100%
Reports
20
ISP
AltunHOST LTD
151.243.113.84
8/10
Confidence
100%
Reports
15
ISP
Dedik Services ...
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
45.140.42.24
10/10
Confidence
100%
Reports
13
ISP
Clouvider Limited
213.209.159.42
8/10
Confidence
100%
Reports
13
ISP
Feo Prest SRL
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
94.26.106.73
10/10
Confidence
99%
Reports
12
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.136
10/10
Confidence
94%
Reports
4,518
Location
TW
TW
198.46.166.149
10/10
Confidence
94%
Reports
2,500
Location
US
US
157.245.176.4
10/10
Confidence
94%
Reports
2,108
Location
US
US
167.99.170.205
10/10
Confidence
94%
Reports
2,108
Location
US
US
192.253.248.215
10/10
Confidence
94%
Reports
1,757
Location
IR
IR
104.248.210.24
8/10
Confidence
94%
Reports
1,535
Location
US
US
94.154.43.87
8/10
Confidence
94%
Reports
1,527
Location
TR
TR
192.253.248.251
10/10
Confidence
94%
Reports
1,511
Location
IR
IR
47.132.122.17
10/10
Confidence
94%
Reports
1,253
Location
US
US
186.4.209.61
10/10
Confidence
94%
Reports
1,250
Location
EC
EC
195.182.16.23
10/10
Confidence
94%
Reports
1,193
Location
DE
DE
38.52.128.108
10/10
Confidence
94%
Reports
965
Location
BR
BR
213.209.159.16
10/10
Confidence
94%
Reports
827
Location
TW
TW
213.209.159.17
10/10
Confidence
94%
Reports
804
Location
TW
TW
76.236.228.92
10/10
Confidence
94%
Reports
803
Location
US
US