Significant Threat
IP 185.73.23.168 identified as significant threat (8/10) from 147 events.
Multiple malicious indicators detected. Confidence level: 96%.
More threatening than 93% of monitored IPs
IP Address
185.73.23.168
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
Ruhr-Universitaet Bochum
ASN 29484
147
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
19. October 2026
Last Activity
22. October 2026
Recent (7 days)
46 incidents
Reputable Network
This IP is hosted on a network (ASN 29484) with generally good reputation. The ISP Ruhr-Universitaet Bochum maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
96%
Verified
Confidence History
22. Oct 2026
96%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.73.23.168
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS29484
- ISP
- Ruhr-Universitaet Bochum
DNS Information
- Reverse DNS
- winston.softsec.ruhr-uni-bochum.de
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 147
- First Reported
- 26 Oct 2026
- Last Reported
- 22 Oct 2026, 22:46
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,291,800 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
147
avg: 7
++
Network Comparison
Compared against 3 IPs in ASN 29484
Threat Level
8/10
network avg: 8.0
=
Total Reports
147
network avg: 328
--
Geographic Comparison
Compared against 22,835 IPs in DE
Threat Level
8/10
country avg: 7.1
=
Total Reports
147
country avg: 26
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Oct 2026
46 reports
Daily Average
4.9
reports/day
Most Active
Thursday
46 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
146
Bad Web Bot
1
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 17 reports
Weekly Activity
Geographic Threat Distribution
1,177,574 threat incidents tracked globally • Last 24h: 29,698 Logs
FEED
Top Threat Sources
-
01
Brazil258,619 22% -
02
United States199,672 17% -
03
India102,524 8.7% -
04
China49,613 4.2% -
05
Argentina41,948 3.6% -
06
SC29,412 2.5% -
07
Mexico27,442 2.3% -
08
Russia26,502 2.3% -
09
Colombia24,027 2% -
10
Germany22,835 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
8/10
Avg Threat
96%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
2
Related IPs
8/10
Avg Threat
96%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,480
ISP
Feo Prest SRL
34.89.170.20
8/10
Confidence
100%
Reports
73
ISP
Google LLC
35.198.76.170
8/10
Confidence
100%
Reports
61
ISP
Google LLC
34.40.11.197
8/10
Confidence
100%
Reports
50
ISP
Google LLC
34.89.162.226
8/10
Confidence
100%
Reports
46
ISP
Google LLC
35.198.107.220
10/10
Confidence
100%
Reports
45
ISP
Google LLC
2a0e:d604:1:1ab::2
10/10
Confidence
100%
Reports
43
ISP
H2nexus Cloud S...
93.152.221.210
10/10
Confidence
100%
Reports
30
ISP
TechTies Inc.
93.152.221.36
10/10
Confidence
100%
Reports
25
ISP
TechTies Inc.
2600:3c17::2000:16ff:fe04:5586
10/10
Confidence
100%
Reports
18
ISP
Akamai Connecte...
213.165.52.39
10/10
Confidence
99%
Reports
17
ISP
Chsl One Ltd
35.198.92.138
8/10
Confidence
98%
Reports
64
ISP
Google LLC
34.179.185.147
10/10
Confidence
98%
Reports
57
ISP
Google LLC
34.89.179.232
8/10
Confidence
98%
Reports
46
ISP
Google LLC
2a0f:ca80:b00b:eff9::5
8/10
Confidence
98%
Reports
30
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
204.76.203.4
10/10
Confidence
96%
Reports
1,347
Location
NL
NL
218.94.4.146
10/10
Confidence
96%
Reports
32
Location
CN
CN
45.156.87.65
8/10
Confidence
96%
Reports
26
Location
NL
NL
77.239.124.112
8/10
Confidence
96%
Reports
36
Location
US
US
193.187.110.159
10/10
Confidence
96%
Reports
229
Location
TR
TR
18.200.155.2
8/10
Confidence
96%
Reports
19
Location
IE
IE
185.191.236.38
8/10
Confidence
96%
Reports
268
Location
CH
CH
216.219.89.86
10/10
Confidence
96%
Reports
813
Location
US
US
170.231.236.98
8/10
Confidence
96%
Reports
247
Location
PA
PA
77.83.39.20
8/10
Confidence
96%
Reports
24
Location
UA
UA
77.83.39.17
8/10
Confidence
96%
Reports
24
Location
UA
UA
34.142.187.57
8/10
Confidence
96%
Reports
19
Location
SG
SG
115.160.76.23
10/10
Confidence
96%
Reports
22
Location
KR
KR
213.177.179.35
7/10
Confidence
96%
Reports
30
Location
TW
TW
119.192.128.163
10/10
Confidence
96%
Reports
37
Location
KR
KR