Substantial Risk
Threat level 7/10 for 2a01:4f8:1c19:f811::1 based on 12 documented incidents.
Consistent suspicious behavior patterns. 30% confidence rating.
More threatening than 56% of monitored IPs
IP Address
2a01:4f8:1c19:f811::1
IPv6
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
Germany
Location
Hetzner Online GmbH
ASN 24940
12
Reports
Community
Data Source
Threat Categories
WP Version Scanning
12
WP Plugin Scanning
12
WP Config Exposure
12
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
11. July 2026
Last Activity
6. August 2026
Recent (7 days)
1 incidents
Datacenter Infrastructure
This IP is allocated from datacenter space operated by Hetzner Online GmbH. Datacenter IPs used for attacks often indicate intentional malicious infrastructure.
Purpose-provisioned attack infrastructure may represent more sophisticated threat actors.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
2/10
Very Low
Confidence Score
29%
Medium Confidence
Confidence History
9. Jun 2026 - 6. Aug 2026
30%
Current
Stable
Trend
Security Reports (12)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% |
Technical Details
Basic Information
- IP Address
- 2a01:4f8:1c19:f811::1
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
DE
- ASN
- AS24940
- ISP
- Hetzner Online GmbH
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 12
- First Reported
- 9 Jun 2026
- Last Reported
- 6 Aug 2026, 21:44
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24940
Hetzner Online GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
501
Total IPs Monitored
58,930
Total Reports
117.6
Reports per IP
Network Context
This IP address belongs to Hetzner Online GmbH (AS24940), which manages 501 IP addresses in our monitoring system. Out of these, 58,930 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
56
%
Global Threat Ranking
This IP is more threatening than 56% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 312,667 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
12
avg: 18
-
Network Comparison
Compared against 1,374 IPs in ASN 24940
Threat Level
7/10
network avg: 5.8
+
Total Reports
12
network avg: 55
--
Network Hetzner Online GmbH has overall threat level 2/10
Geographic Comparison
Compared against 10,510 IPs in DE
Threat Level
7/10
country avg: 6.4
=
Total Reports
12
country avg: 47
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 Jul 2026
1 reports
Daily Average
0.2
reports/day
Most Active
Wednesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Plugin Scanning
12
WP Version Scanning
12
WP Config Exposure
12
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
88.198.64.173
8/10
Confidence
100%
Reports
174
Location
DE
DE
46.224.234.158
8/10
Confidence
100%
Reports
134
Location
DE
DE
148.251.47.87
8/10
Confidence
100%
Reports
114
Location
DE
DE
37.27.234.213
8/10
Confidence
100%
Reports
93
Location
FI
FI
49.12.3.147
10/10
Confidence
100%
Reports
78
Location
DE
DE
94.130.219.13
10/10
Confidence
100%
Reports
58
Location
DE
DE
95.216.117.13
8/10
Confidence
100%
Reports
38
Location
FI
FI
95.216.3.239
8/10
Confidence
100%
Reports
33
Location
FI
FI
65.109.158.145
10/10
Confidence
100%
Reports
28
Location
FI
FI
157.90.174.226
8/10
Confidence
100%
Reports
28
Location
DE
DE
46.62.186.30
10/10
Confidence
100%
Reports
23
Location
FI
FI
116.203.220.114
10/10
Confidence
100%
Reports
21
Location
DE
DE
167.233.44.241
10/10
Confidence
100%
Reports
21
Location
DE
DE
49.13.1.223
10/10
Confidence
100%
Reports
21
Location
DE
DE
157.180.34.0
8/10
Confidence
100%
Reports
20
Location
FI
FI
78.46.92.235
10/10
Confidence
100%
Reports
19
Location
DE
DE
94.130.11.28
8/10
Confidence
100%
Reports
15
Location
DE
DE
144.76.119.9
10/10
Confidence
100%
Reports
14
Location
DE
DE
178.104.240.0
10/10
Confidence
100%
Reports
14
Location
DE
DE
91.98.21.65
8/10
Confidence
99%
Reports
37
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
134
ISP
Hetzner Online ...
148.251.47.87
8/10
Confidence
100%
Reports
114
ISP
Hetzner Online ...
94.26.106.216
8/10
Confidence
100%
Reports
109
ISP
dataforest GmbH
89.58.31.106
10/10
Confidence
100%
Reports
106
ISP
netcup GmbH
164.92.161.148
10/10
Confidence
100%
Reports
101
ISP
DigitalOcean, LLC
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
85.215.252.72
8/10
Confidence
100%
Reports
89
ISP
IONOS SE
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
217.160.212.27
8/10
Confidence
100%
Reports
76
ISP
IONOS SE
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
83.169.38.142
10/10
Confidence
100%
Reports
63
ISP
Host Europe GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.2/10
Avg Threat
30%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
124.110.158.227
7/10
Confidence
30%
Reports
93
Location
JP
JP
172.239.239.114
7/10
Confidence
30%
Reports
70
Location
NL
NL
103.216.112.204
7/10
Confidence
30%
Reports
70
Location
VN
VN
2a09:bac5:49f:18d2::279:8d
7/10
Confidence
30%
Reports
54
Location
BD
BD
197.214.64.202
7/10
Confidence
30%
Reports
46
Location
GQ
GQ
180.243.40.27
7/10
Confidence
30%
Reports
45
Location
ID
ID
116.235.246.29
7/10
Confidence
30%
Reports
44
Location
CN
CN
196.1.250.242
7/10
Confidence
30%
Reports
44
Location
SD
SD
117.4.133.29
7/10
Confidence
30%
Reports
44
Location
VN
VN
185.220.101.19
8/10
Confidence
30%
Reports
43
Location
DE
DE
45.133.74.53
8/10
Confidence
30%
Reports
40
Location
DE
DE
143.110.140.191
7/10
Confidence
30%
Reports
39
Location
US
US
147.182.134.71
7/10
Confidence
30%
Reports
39
Location
US
US
109.125.168.62
7/10
Confidence
30%
Reports
35
Location
IR
IR
185.220.101.12
8/10
Confidence
30%
Reports
34
Location
DE
DE