Significant Threat
IP 194.94.79.252 identified as significant threat (8/10) from 14 events.
Multiple malicious indicators detected. Confidence level: 100%.
More threatening than 90% of monitored IPs
IP Address
194.94.79.252
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
Verein zur Foerderung ein...
ASN 680
14
Reports
Mixed
Data Source
Threat Categories
Brute-Force
10
Web App Attack
9
WP Login Brute Force
3
Port Scan
2
Hacking
2
WP XML-RPC Brute Force
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
24. September 2026
Last Activity
7. October 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 680) with generally good reputation. The ISP Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
100%
Verified
Confidence History
5. Jul 2026 - 7. Oct 2026
100%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 194.94.79.252
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
DE
- ASN
- AS680
- ISP
- Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
DNS Information
- Reverse DNS
- nat252.hochschule-stralsund.de
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 5 Jul 2026
- Last Reported
- 7 Oct 2026, 14:38
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS680
Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
11
Total IPs Monitored
136
Total Reports
12.4
Reports per IP
Network Context
This IP address belongs to Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. (AS680), which manages 11 IP addresses in our monitoring system. Out of these, 136 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 831,747 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
14
avg: 9
++
Network Comparison
Compared against 83 IPs in ASN 680
Threat Level
8/10
network avg: 7.0
=
Total Reports
14
network avg: 5
++
Network Verein zur Foerderung eines Deutschen Forschungsnetzes e.V. has overall threat level 2/10
Geographic Comparison
Compared against 18,324 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
14
country avg: 30
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Wednesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
10
Web App Attack
9
WP Login Brute Force
3
Port Scan
2
Hacking
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
755,883 threat incidents tracked globally • Last 24h: 28,730 Logs
FEED
Top Threat Sources
-
01
United States147,855 19.6% -
02
Brazil111,763 14.8%
-
03
India87,027 11.5%
-
04
China46,031 6.1%
-
05
SC29,251 3.9%
-
06
Germany18,325 2.4%
-
07
Netherlands17,944 2.4%
-
08
Pakistan17,764 2.4%
-
09
Argentina16,263 2.2%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.8/10
Avg Threat
29%
Avg Confidence
8
High Threat
Elevated risk: Multiple related IPs are flagged
139.19.117.131
10/10
Confidence
78%
Reports
236
Location
DE
DE
194.94.79.253
8/10
Confidence
43%
Reports
4
Location
DE
DE
192.108.48.150
8/10
Confidence
35%
Reports
7
Location
DE
DE
141.76.94.41
7/10
Confidence
34%
Reports
2
Location
DE
DE
194.94.76.137
7/10
Confidence
31%
Reports
2
Location
DE
DE
2001:638:805:22:5950:4d20:6f8d:552b
10/10
Confidence
30%
Reports
3
Location
DE
DE
193.175.119.14
7/10
Confidence
28%
Reports
3
Location
DE
DE
141.20.217.52
6/10
Confidence
24%
Reports
1
Location
DE
DE
141.44.223.174
6/10
Confidence
23%
Reports
1
Location
DE
DE
149.220.170.227
7/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:ad4d:5599:bf39:a697
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:9ce1:c3d2:c0c5:ede4
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:30b9:72c6:2e6e:5109
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:15f4:bfbc:7b2a:e09
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:9dcc:9806:1b10:649a
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:c59d:c0a9:e692:3ffa
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:88a5:22bd:7ac2:72a
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:980c:b184:10fc:bf11
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:dd36:c89e:e12e:7de3
6/10
Confidence
23%
Reports
1
Location
DE
DE
2001:638:805:22:a028:ecb0:cb72:2f2d
6/10
Confidence
23%
Reports
1
Location
DE
DE
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
43%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,029
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
123
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
47
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
17
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
213.209.159.42
8/10
Confidence
100%
Reports
13
ISP
Feo Prest SRL
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.180.85.36
8/10
Confidence
100%
Reports
25
Location
JP
JP
35.204.212.239
8/10
Confidence
100%
Reports
30
Location
NL
NL
34.95.60.17
8/10
Confidence
100%
Reports
29
Location
CA
CA
35.234.68.116
10/10
Confidence
100%
Reports
38
Location
DE
DE
34.80.101.88
10/10
Confidence
100%
Reports
26
Location
TW
TW
34.76.186.219
8/10
Confidence
100%
Reports
49
Location
BE
BE
35.240.150.242
8/10
Confidence
100%
Reports
24
Location
SG
SG
35.245.72.15
8/10
Confidence
100%
Reports
17
Location
US
US
34.53.37.173
8/10
Confidence
100%
Reports
23
Location
US
US
34.159.0.93
8/10
Confidence
100%
Reports
37
Location
DE
DE
136.110.22.245
8/10
Confidence
100%
Reports
31
Location
SG
SG
34.118.181.37
8/10
Confidence
100%
Reports
16
Location
CA
CA
35.241.132.20
8/10
Confidence
100%
Reports
15
Location
BE
BE
34.78.64.142
8/10
Confidence
100%
Reports
20
Location
BE
BE
34.62.25.61
10/10
Confidence
100%
Reports
19
Location
BE
BE