Extreme Threat
IP 167.235.98.252 classified at threat level 10/10 with 22 documented attacks.
Advanced threat indicators confirmed with 96% certainty.
More threatening than 100% of monitored IPs
IP Address
167.235.98.252
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Germany
Location
Hetzner Online GmbH
ASN 24940
22
Reports
Mixed
Data Source
Threat Categories
Hacking
21
SSH
21
Exploited Host
2
Brute-Force
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
1. October 2026
Last Activity
1. October 2026
Recent (7 days)
22 incidents
Datacenter Infrastructure
This IP is allocated from datacenter space operated by Hetzner Online GmbH. Datacenter IPs used for attacks often indicate intentional malicious infrastructure.
Purpose-provisioned attack infrastructure may represent more sophisticated threat actors.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
96%
Verified
Confidence History
1. Oct 2026
96%
Current
Stable
Trend
Security Reports (22)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Exploited Host Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Brute-Force | Community | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH Exploited Host | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 167.235.98.252
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS24940
- ISP
- Hetzner Online GmbH
DNS Information
- Reverse DNS
- static.252.98.235.167.clients.your-server.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 22
- First Reported
- 1 Oct 2026
- Last Reported
- 1 Oct 2026, 21:06
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24940
Hetzner Online GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
501
Total IPs Monitored
58,930
Total Reports
117.6
Reports per IP
Network Context
This IP address belongs to Hetzner Online GmbH (AS24940), which manages 501 IP addresses in our monitoring system. Out of these, 58,930 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 810,463 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
22
avg: 9
++
Network Comparison
Compared against 1,981 IPs in ASN 24940
Threat Level
10/10
network avg: 7.1
+
Total Reports
22
network avg: 39
-
Network Hetzner Online GmbH has overall threat level 2/10
Geographic Comparison
Compared against 17,647 IPs in DE
Threat Level
10/10
country avg: 7.3
+
Total Reports
22
country avg: 31
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
1 Oct 2026
22 reports
Daily Average
0.7
reports/day
Most Active
Thursday
22 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
21
SSH
21
Exploited Host
2
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
736,937 threat incidents tracked globally • Last 24h: 33,228 Logs
FEED
Top Threat Sources
-
01
United States144,033 19.5% -
02
Brazil110,901 15%
-
03
India82,845 11.2%
-
04
China44,959 6.1%
-
05
SC29,241 4%
-
06
Germany17,646 2.4%
-
07
Netherlands17,552 2.4%
-
08
Pakistan16,813 2.3%
-
09
Argentina16,197 2.2%
-
10
Colombia15,142 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
85%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
138.201.205.59
8/10
Confidence
99%
Reports
17
Location
DE
DE
65.108.194.8
10/10
Confidence
96%
Reports
14
Location
FI
FI
2.28.235.95
8/10
Confidence
93%
Reports
10
Location
DE
DE
23.88.47.15
10/10
Confidence
92%
Reports
15
Location
DE
DE
49.12.0.144
8/10
Confidence
92%
Reports
11
Location
DE
DE
144.76.32.117
6/10
Confidence
89%
Reports
125
Location
DE
DE
178.105.31.42
8/10
Confidence
86%
Reports
10
Location
DE
DE
167.233.75.12
8/10
Confidence
84%
Reports
9
Location
DE
DE
2a01:4f8:271:188f::3
10/10
Confidence
82%
Reports
48
Location
DE
DE
136.243.65.145
10/10
Confidence
82%
Reports
40
Location
DE
DE
138.201.58.132
10/10
Confidence
82%
Reports
22
Location
DE
DE
65.21.239.164
8/10
Confidence
82%
Reports
8
Location
FI
FI
37.27.134.178
10/10
Confidence
81%
Reports
58
Location
FI
FI
176.9.105.121
10/10
Confidence
81%
Reports
51
Location
DE
DE
178.63.234.222
10/10
Confidence
81%
Reports
49
Location
DE
DE
148.251.29.36
10/10
Confidence
81%
Reports
14
Location
DE
DE
91.107.158.47
10/10
Confidence
80%
Reports
14
Location
DE
DE
88.198.255.173
10/10
Confidence
79%
Reports
163
Location
DE
DE
95.217.220.120
10/10
Confidence
79%
Reports
43
Location
FI
FI
138.201.159.109
10/10
Confidence
79%
Reports
33
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
830
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
38
ISP
TechTies Inc.
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
27
ISP
netcup GmbH
5.175.206.193
8/10
Confidence
100%
Reports
20
ISP
AltunHOST LTD
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
151.243.113.84
8/10
Confidence
100%
Reports
13
ISP
Dedik Services ...
138.201.205.59
8/10
Confidence
99%
Reports
17
ISP
Hetzner Online ...
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
94.26.106.73
10/10
Confidence
99%
Reports
12
ISP
TechTies Inc.
136.92.18.166
8/10
Confidence
98%
Reports
28
ISP
Google LLC
2a01:239:265:2100::1
8/10
Confidence
97%
Reports
31
ISP
IONOS SE
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.5.0.236
8/10
Confidence
96%
Reports
636
Location
US
US
216.219.89.86
10/10
Confidence
96%
Reports
560
Location
US
US
204.76.203.4
8/10
Confidence
96%
Reports
396
Location
NL
NL
195.178.110.228
10/10
Confidence
96%
Reports
372
Location
BG
BG
80.94.93.9
8/10
Confidence
96%
Reports
318
Location
RO
RO
109.205.211.29
8/10
Confidence
96%
Reports
317
Location
AZ
AZ
195.178.110.232
10/10
Confidence
96%
Reports
311
Location
BG
BG
109.205.211.27
8/10
Confidence
96%
Reports
206
Location
AZ
AZ
86.38.182.193
10/10
Confidence
96%
Reports
169
Location
FI
FI
185.73.23.162
8/10
Confidence
96%
Reports
160
Location
DE
DE
91.196.152.161
10/10
Confidence
96%
Reports
154
Location
FR
FR
91.231.89.18
8/10
Confidence
96%
Reports
145
Location
FR
FR
91.231.89.37
10/10
Confidence
96%
Reports
124
Location
FR
FR
91.231.89.101
10/10
Confidence
96%
Reports
123
Location
FR
FR
91.231.89.125
10/10
Confidence
96%
Reports
123
Location
FR
FR