Significant Threat
IP 5.253.84.92 identified as significant threat (8/10) from 29 events.
Multiple malicious indicators detected. Confidence level: 96%.
More threatening than 85% of monitored IPs
IP Address
5.253.84.92
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
ColocaTel Inc.
ASN 213438
29
Reports
Mixed
Data Source
Threat Categories
Brute-Force
23
WP Login Brute Force
9
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
23. July 2026
Last Activity
5. August 2026
Recent (7 days)
10 incidents
Reputable Network
This IP is hosted on a network (ASN 213438) with generally good reputation. The ISP ColocaTel Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
95%
Verified
Confidence History
23. Jul 2026 - 5. Aug 2026
96%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force | Community | 75% |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.253.84.92
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS213438
- ISP
- ColocaTel Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 23 Jul 2026
- Last Reported
- 5 Aug 2026, 21:10
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213438
ColocaTel Inc.
BG
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
61
Total IPs Monitored
15,820
Total Reports
259.3
Reports per IP
Network Context
This IP address belongs to ColocaTel Inc. (AS213438), which manages 61 IP addresses in our monitoring system. Out of these, 15,820 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 311,973 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
29
avg: 18
++
Network Comparison
Compared against 85 IPs in ASN 213438
Threat Level
8/10
network avg: 6.5
+
Total Reports
29
network avg: 258
--
Network ColocaTel Inc. has overall threat level 3/10
Geographic Comparison
Compared against 65,768 IPs in US
Threat Level
8/10
country avg: 6.5
+
Total Reports
29
country avg: 31
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
24 Jul 2026
7 reports
Daily Average
1
reports/day
Most Active
Friday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
23
WP Login Brute Force
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
292,558 threat incidents tracked globally • Last 24h: 17,585 Logs
FEED
Top Threat Sources
-
01
United States65,768 22.5%
-
02
India49,069 16.8% -
03
China35,620 12.2% -
04
Brazil15,548 5.3% -
05
Germany10,498 3.6% -
06
Pakistan8,466 2.9% -
07
Indonesia8,403 2.9% -
08
Singapore8,311 2.8% -
09
Russia6,391 2.2% -
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
78.142.18.172
8/10
Confidence
100%
Reports
1,729
Location
BG
BG
85.11.167.118
8/10
Confidence
100%
Reports
288
Location
BG
BG
45.134.225.230
8/10
Confidence
100%
Reports
46
Location
DE
DE
45.134.225.130
8/10
Confidence
99%
Reports
65
Location
DE
DE
85.11.167.7
10/10
Confidence
98%
Reports
1,505
Location
BG
BG
193.142.146.65
8/10
Confidence
97%
Reports
92
Location
DE
DE
78.142.18.43
8/10
Confidence
97%
Reports
55
Location
NL
NL
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
45.134.225.241
8/10
Confidence
96%
Reports
42
Location
DE
DE
85.11.167.89
10/10
Confidence
94%
Reports
21
Location
BG
BG
45.134.225.16
10/10
Confidence
93%
Reports
612
Location
DE
DE
2a0f:ca80::8d
8/10
Confidence
93%
Reports
44
Location
NL
NL
37.60.141.252
8/10
Confidence
92%
Reports
41
Location
BG
BG
85.11.167.11
10/10
Confidence
91%
Reports
2,027
Location
BG
BG
85.11.167.30
7/10
Confidence
90%
Reports
207
Location
BG
BG
193.142.147.57
8/10
Confidence
90%
Reports
105
Location
DE
DE
45.134.225.250
8/10
Confidence
89%
Reports
21
Location
DE
DE
85.11.167.8
10/10
Confidence
88%
Reports
12
Location
BG
BG
31.56.110.107
10/10
Confidence
86%
Reports
41
Location
AE
AE
85.11.167.19
10/10
Confidence
81%
Reports
9
Location
BG
BG
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
47%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.4/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
162.254.36.150
8/10
Confidence
100%
Reports
545
ISP
Namecheap, Inc.
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
72.167.132.114
10/10
Confidence
100%
Reports
205
ISP
GoDaddy.com, LLC
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
177
ISP
Limestone Netwo...
97.74.93.24
10/10
Confidence
100%
Reports
149
ISP
GoDaddy.com, LLC
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
97.74.88.143
8/10
Confidence
100%
Reports
140
ISP
GoDaddy.com, LLC
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
72.167.50.103
8/10
Confidence
100%
Reports
129
ISP
GoDaddy.com, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
96%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
185.91.127.85
10/10
Confidence
96%
Reports
921
Location
DE
DE
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
20.203.42.204
10/10
Confidence
96%
Reports
595
Location
AE
AE
141.98.11.117
8/10
Confidence
96%
Reports
554
Location
LT
LT
5.61.209.43
8/10
Confidence
96%
Reports
416
Location
SC
SC
68.178.160.25
8/10
Confidence
96%
Reports
324
Location
US
US
168.63.79.147
8/10
Confidence
96%
Reports
317
Location
IE
IE
94.154.43.243
8/10
Confidence
96%
Reports
307
Location
NL
NL
20.153.140.50
8/10
Confidence
96%
Reports
301
Location
SG
SG
176.65.139.8
8/10
Confidence
96%
Reports
268
Location
DE
DE
176.65.139.140
8/10
Confidence
96%
Reports
266
Location
DE
DE
195.178.110.100
10/10
Confidence
96%
Reports
250
Location
BG
BG
89.42.231.200
10/10
Confidence
96%
Reports
231
Location
NL
NL
64.89.161.198
6/10
Confidence
96%
Reports
230
Location
US
US