IP Address

57.129.120.143

IPv4 Public
DE DE
AS16276
OVH SAS
15 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
94% Confidence
15 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Top 10% High Threat
DE
Germany Location
OVH SAS ASN 16276
15 Reports
Mixed Data Source

Significant Threat

IP 57.129.120.143 identified as significant threat (8/10) from 15 events.

Multiple malicious indicators detected. Confidence level: 94%.

More threatening than 90% of monitored IPs

Threat Categories

SSH 15
Brute-Force 1

Technical Details

SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.

Recommended Mitigations

Use key-based authentication, change default ports, implement fail2ban, and disable root login.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 3 weeks indicates persistent threat actor operations.

First Observed 4. September 2026
Last Activity 26. September 2026
Recent (7 days) 2 incidents

Datacenter Infrastructure

This IP is allocated from datacenter space operated by OVH SAS. Datacenter IPs used for attacks often indicate intentional malicious infrastructure.

Purpose-provisioned attack infrastructure may represent more sophisticated threat actors.

Security Recommendations

Implement rate limiting or temporary blocking measures.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 1/10 Very Low
Confidence Score 94% Verified

Confidence History

27. Aug 2026 - 26. Sep 2026
94% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (15)

Date Categories Source Confidence
SSH Honeypot 75%
SSH Brute-Force Community 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot x2 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
10 of 15 shown

Technical Details

Basic Information

IP Address
57.129.120.143
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
DE DE
ASN
AS16276
ISP
OVH SAS

DNS Information

Reverse DNS
vps-d7e7f2a5.vps.ovh.net
PTR Record
Yes
Connection Type
Static

Statistics

Total Reports
15
First Reported
27 Aug 2026
Last Reported
26 Sep 2026, 12:28

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS16276
OVH SAS
FR FR

Network Threat Assessment

2/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

1,385
Total IPs Monitored
33,679
Total Reports
24.3
Reports per IP

Network Context

This IP address belongs to OVH SAS (AS16276), which manages 1,385 IP addresses in our monitoring system. Out of these, 33,679 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

90 %

Global Threat Ranking

This IP is more threatening than 90% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 810,911 reported IPs worldwide

Threat Level 8/10 avg: 6.3 +
Total Reports 15 avg: 9 ++

Network Comparison

Compared against 4,401 IPs in ASN 16276

Threat Level 8/10 network avg: 6.8 +
Total Reports 15 network avg: 18 -
Network OVH SAS has overall threat level 2/10

Geographic Comparison

Compared against 17,668 IPs in DE

Threat Level 8/10 country avg: 7.3 =
Total Reports 15 country avg: 31 --
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

737,373 threat incidents tracked globally • Last 24h: 35,163 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    144,136 19.5%
  2. 02
    BR
    Brazil BR
    110,954 15%
  3. 03
    IN
    India IN
    82,861 11.2%
  4. 04
    CN
    China CN
    45,003 6.1%
  5. 05
    SC
    SC SC
    29,242 4%
  6. 06
    DE
    Germany DE THIS IP
    17,668 2.4%
  7. 07
    NL
    Netherlands NL
    17,557 2.4%
  8. 08
    PK
    Pakistan PK
    16,824 2.3%
  9. 09
    AR
    Argentina AR
    16,204 2.2%
  10. 10
    CO
    Colombia CO
    15,143 2.1%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
9.6/10 Avg Threat
98% Avg Confidence
20 High Threat
High-risk network: Majority of related IPs are flagged
94.23.66.112 10/10
Confidence 100%
Reports 70
Location FR FR
2 Oct 2026
51.75.21.168 10/10
Confidence 100%
Reports 65
Location FR FR
2 Oct 2026
57.128.222.79 10/10
Confidence 100%
Reports 23
Location PL PL
1 Oct 2026
141.95.162.162 10/10
Confidence 100%
Reports 22
Location FR FR
29 Sep 2026
54.38.109.115 10/10
Confidence 100%
Reports 17
Location FR FR
30 Sep 2026
51.75.27.218 10/10
Confidence 100%
Reports 16
Location FR FR
1 Oct 2026
57.128.239.181 10/10
Confidence 99%
Reports 18
Location PL PL
27 Sep 2026
145.239.112.29 10/10
Confidence 98%
Reports 55
Location FR FR
20 Sep 2026
151.80.213.177 10/10
Confidence 98%
Reports 31
Location FR FR
16 Sep 2026
2001:41d0:304:300::3de9 8/10
Confidence 97%
Reports 89
Location FR FR
1 Oct 2026
51.222.85.30 8/10
Confidence 96%
Reports 73
Location CA CA
15 Sep 2026
149.202.60.122 10/10
Confidence 96%
Reports 39
Location FR FR
1 Oct 2026
54.37.68.60 10/10
Confidence 96%
Reports 33
Location FR FR
2 Oct 2026
51.83.133.35 10/10
Confidence 96%
Reports 31
Location PL PL
2 Oct 2026
51.210.10.40 8/10
Confidence 96%
Reports 29
Location FR FR
2 Oct 2026
51.222.156.111 10/10
Confidence 96%
Reports 29
Location CA CA
2 Oct 2026
80.87.206.148 8/10
Confidence 96%
Reports 29
Location RU RU
30 Sep 2026
57.128.196.220 10/10
Confidence 96%
Reports 17
Location PL PL
29 Sep 2026
137.74.162.180 10/10
Confidence 96%
Reports 16
Location FR FR
30 Sep 2026
51.254.104.36 10/10
Confidence 96%
Reports 16
Location FR FR
1 Oct 2026

IPs from the same country with similar threat profiles.

15 Related IPs
8.7/10 Avg Threat
99% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208 10/10
Confidence 100%
Reports 833
ISP Feo Prest SRL
2 Oct 2026
136.92.16.48 8/10
Confidence 100%
Reports 231
ISP Google LLC
29 Sep 2026
136.92.26.87 10/10
Confidence 100%
Reports 96
ISP Google LLC
29 Sep 2026
62.80.98.102 10/10
Confidence 100%
Reports 53
ISP euNetworks GmbH
26 Sep 2026
136.92.29.89 8/10
Confidence 100%
Reports 40
ISP Google LLC
1 Oct 2026
2a0f:ca80:b00b:28d8::5 8/10
Confidence 100%
Reports 38
ISP TechTies Inc.
24 Sep 2026
2a03:4000:0:5d0:74dd:98ff:fe39:40cd 8/10
Confidence 100%
Reports 27
ISP netcup GmbH
1 Oct 2026
5.175.206.193 8/10
Confidence 100%
Reports 20
ISP AltunHOST LTD
1 Oct 2026
213.165.52.39 10/10
Confidence 100%
Reports 14
ISP Chsl One Ltd
29 Sep 2026
151.243.113.84 8/10
Confidence 100%
Reports 13
ISP Dedik Services ...
1 Oct 2026
138.201.205.59 8/10
Confidence 99%
Reports 17
ISP Hetzner Online ...
26 Sep 2026
4.185.40.215 8/10
Confidence 99%
Reports 16
ISP Microsoft Corpo...
28 Sep 2026
94.26.106.73 10/10
Confidence 99%
Reports 12
ISP TechTies Inc.
1 Oct 2026
136.92.18.166 8/10
Confidence 98%
Reports 28
ISP Google LLC
1 Oct 2026
2a01:239:265:2100::1 8/10
Confidence 97%
Reports 31
ISP IONOS SE
1 Oct 2026

IPs with similar threat level and confidence scores.

15 Related IPs
9.7/10 Avg Threat
94% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.136 10/10
Confidence 94%
Reports 4,389
Location TW TW
2 Oct 2026
198.46.166.149 10/10
Confidence 94%
Reports 2,422
Location US US
2 Oct 2026
157.245.176.4 10/10
Confidence 94%
Reports 1,979
Location US US
2 Oct 2026
167.99.170.205 10/10
Confidence 94%
Reports 1,977
Location US US
2 Oct 2026
85.95.238.132 10/10
Confidence 94%
Reports 1,848
Location TR TR
17 Sep 2026
192.253.248.215 10/10
Confidence 94%
Reports 1,757
Location IR IR
22 Sep 2026
94.154.43.87 8/10
Confidence 94%
Reports 1,527
Location TR TR
20 Sep 2026
192.253.248.251 10/10
Confidence 94%
Reports 1,468
Location IR IR
1 Oct 2026
104.248.210.24 8/10
Confidence 94%
Reports 1,440
Location US US
2 Oct 2026
47.132.122.17 10/10
Confidence 94%
Reports 1,253
Location US US
2 Oct 2026
186.4.209.61 10/10
Confidence 94%
Reports 1,213
Location EC EC
2 Oct 2026
195.182.16.23 10/10
Confidence 94%
Reports 1,146
Location DE DE
1 Oct 2026
38.52.128.108 10/10
Confidence 94%
Reports 965
Location BR BR
28 Sep 2026
213.209.159.16 10/10
Confidence 94%
Reports 827
Location TW TW
1 Oct 2026
213.209.159.17 10/10
Confidence 94%
Reports 804
Location TW TW
1 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "57.129.120.143",
    "threat_level": 8,
    "confidence_score": 94,
    "total_reports": 15,
    "country_code": "DE",
    "isp_name": "OVH SAS",
    "asn": "16276",
    "first_reported": "2026-08-27 17:40:03",
    "last_reported": "2026-09-26 12:28:09",
    "exported_at": "2026-10-02T00:27:19+02:00",
    "source": "https://reportedip.com/ip/57.129.120.143/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses