Significant Threat
IP 204.168.139.102 identified as significant threat (8/10) from 3 events.
Multiple malicious indicators detected. Confidence level: 40%.
More threatening than 92% of monitored IPs
IP Address
204.168.139.102
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
Hetzner Online GmbH
ASN 24940
3
Reports
Mixed
Data Source
Threat Categories
Brute-Force
2
Web App Attack
2
WP User Enumeration
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
6. November 2026
Last Activity
6. November 2026
Recent (7 days)
1 incidents
Datacenter Infrastructure
This IP is allocated from datacenter space operated by Hetzner Online GmbH. Datacenter IPs used for attacks often indicate intentional malicious infrastructure.
Purpose-provisioned attack infrastructure may represent more sophisticated threat actors.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
40%
Medium Confidence
Confidence History
16. Sep 2026 - 6. Nov 2026
40%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP User Enumeration | Community | 75% |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 204.168.139.102
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
DE
- ASN
- AS24940
- ISP
- Hetzner Online GmbH
DNS Information
- Reverse DNS
- static.102.139.168.204.clients.your-server.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 3
- First Reported
- 16 Sep 2026
- Last Reported
- 6 Nov 2026, 00:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24940
Hetzner Online GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
501
Total IPs Monitored
58,930
Total Reports
117.6
Reports per IP
Network Context
This IP address belongs to Hetzner Online GmbH (AS24940), which manages 501 IP addresses in our monitoring system. Out of these, 58,930 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,325,697 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
3
avg: 7
--
Network Comparison
Compared against 2,391 IPs in ASN 24940
Threat Level
8/10
network avg: 7.0
+
Total Reports
3
network avg: 35
--
Network Hetzner Online GmbH has overall threat level 2/10
Geographic Comparison
Compared against 24,303 IPs in DE
Threat Level
8/10
country avg: 7.1
=
Total Reports
3
country avg: 25
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Nov 2026
1 reports
Daily Average
0
reports/day
Most Active
Wednesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
2
Web App Attack
2
WP User Enumeration
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,208,374 threat incidents tracked globally • Last 24h: 35,831 Logs
FEED
Top Threat Sources
-
01
Brazil260,988 21.6% -
02
United States206,549 17.1% -
03
India103,464 8.6% -
04
China50,826 4.2% -
05
Argentina42,393 3.5% -
06
SC29,445 2.4% -
07
Mexico27,902 2.3% -
08
Russia26,962 2.2% -
09
Germany24,310 2%
-
10
Colombia24,263 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
78%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
2.29.112.91
10/10
Confidence
96%
Reports
15
Location
FI
FI
178.63.197.160
10/10
Confidence
92%
Reports
17
Location
DE
DE
178.105.31.42
10/10
Confidence
92%
Reports
16
Location
DE
DE
94.130.226.243
10/10
Confidence
91%
Reports
18
Location
DE
DE
144.76.32.117
6/10
Confidence
89%
Reports
493
Location
DE
DE
213.239.255.120
10/10
Confidence
89%
Reports
12
Location
DE
DE
144.76.159.59
10/10
Confidence
86%
Reports
377
Location
DE
DE
65.109.22.141
10/10
Confidence
85%
Reports
314
Location
FI
FI
136.243.212.93
6/10
Confidence
83%
Reports
25
Location
DE
DE
62.238.11.208
10/10
Confidence
77%
Reports
12
Location
FI
FI
116.203.18.194
8/10
Confidence
76%
Reports
12
Location
DE
DE
2a01:4f8:c012:4640::1
10/10
Confidence
73%
Reports
52,528
Location
DE
DE
178.105.183.10
7/10
Confidence
71%
Reports
20
Location
DE
DE
167.233.195.205
8/10
Confidence
71%
Reports
16
Location
DE
DE
65.109.236.138
8/10
Confidence
70%
Reports
17
Location
FI
FI
65.108.2.171
10/10
Confidence
68%
Reports
20
Location
FI
FI
2a01:4f8:173:1383::2
7/10
Confidence
68%
Reports
7
Location
DE
DE
204.168.204.232
8/10
Confidence
66%
Reports
10
Location
DE
DE
167.233.196.216
8/10
Confidence
64%
Reports
9
Location
DE
DE
2.29.129.154
10/10
Confidence
62%
Reports
5
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,480
ISP
Feo Prest SRL
35.198.76.170
8/10
Confidence
100%
Reports
61
ISP
Google LLC
2a0e:d604:1:1ab::2
10/10
Confidence
100%
Reports
49
ISP
H2nexus Cloud S...
35.198.107.220
10/10
Confidence
100%
Reports
45
ISP
Google LLC
2a14:c380:1300:175::a
8/10
Confidence
99%
Reports
17
ISP
Netiface Americ...
34.89.170.20
8/10
Confidence
98%
Reports
73
ISP
Google LLC
34.89.162.226
8/10
Confidence
98%
Reports
46
ISP
Google LLC
35.246.157.1
10/10
Confidence
98%
Reports
22
ISP
Google LLC
34.185.152.112
10/10
Confidence
98%
Reports
21
ISP
Google LLC
2a0f:ca80:b00b:39ec::5
8/10
Confidence
98%
Reports
16
ISP
TechTies Inc.
172.105.76.7
10/10
Confidence
97%
Reports
28
ISP
Akamai Connecte...
104.248.132.98
10/10
Confidence
97%
Reports
23
ISP
DigitalOcean, LLC
185.73.23.162
8/10
Confidence
96%
Reports
602
ISP
Ruhr-Universita...
185.73.23.161
8/10
Confidence
96%
Reports
236
ISP
Ruhr-Universita...
185.73.23.168
8/10
Confidence
96%
Reports
147
ISP
Ruhr-Universita...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
40%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
165.101.179.133
10/10
Confidence
40%
Reports
5
Location
ID
ID
87.120.93.159
10/10
Confidence
40%
Reports
5
Location
DE
DE
45.134.79.100
10/10
Confidence
40%
Reports
3
Location
FR
FR
2804:6ef8:1104:7000:a59b:eea9:c028:561b
10/10
Confidence
40%
Reports
3
Location
BR
BR
34.180.75.124
10/10
Confidence
40%
Reports
3
Location
JP
JP
103.84.178.159
10/10
Confidence
40%
Reports
3
Location
IN
IN
151.123.144.21
10/10
Confidence
40%
Reports
3
Location
PK
PK
91.186.244.127
10/10
Confidence
40%
Reports
3
Location
JO
JO
34.17.158.11
10/10
Confidence
40%
Reports
3
Location
IT
IT
202.141.41.67
10/10
Confidence
40%
Reports
3
Location
IN
IN
34.81.188.197
10/10
Confidence
40%
Reports
4
Location
TW
TW
34.159.15.98
10/10
Confidence
40%
Reports
3
Location
DE
DE
2800:cb0:1159:d700:b111:1765:f9e4:661a
10/10
Confidence
40%
Reports
5
Location
AR
AR
197.1.71.184
10/10
Confidence
40%
Reports
4
Location
TN
TN
2409:40e3:402b:d0e8:30ef:b02c:ad54:af10
10/10
Confidence
40%
Reports
4
Location
IN
IN