Critical Alert
Security alert: 91.137.27.140 rated 10/10 based on 6 verified incidents.
Threat profile indicates sustained malicious activity with 25% confidence rating.
More threatening than 97% of monitored IPs
IP Address
91.137.27.140
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
DE
Location
Thueringer Netkom GmbH
ASN 199284
6
Reports
Mixed
Data Source
Threat Categories
Web App Attack
5
WP Version Scanning
1
WP Plugin Scanning
1
WP Config Exposure
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
High-Risk Network Association
This IP belongs to a network (ASN 199284) with elevated threat levels. The ISP Thueringer Netkom GmbH hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
25%
Low Confidence
Confidence History
11. Feb 2026 - 13. Sep 2026
25%
Current
Stable
Trend
Security Reports (6)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot x9 | 75% | |
| Web App Attack | Honeypot x4 | 75% |
Technical Details
Basic Information
- IP Address
- 91.137.27.140
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS199284
- ISP
- Thueringer Netkom GmbH
DNS Information
- Reverse DNS
- vdsl-91-137-27-140.net.encoline.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 6
- First Reported
- 11 Feb 2026
- Last Reported
- 13 Sep 2026, 15:37
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS199284
Thueringer Netkom GmbH
DE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
5
Total Reports
5
Reports per IP
Network Context
This IP address belongs to Thueringer Netkom GmbH (AS199284), which manages 1 IP addresses in our monitoring system. Out of these, 5 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,284,496 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
6
avg: 7
=
Network Comparison
Compared against 5 IPs in ASN 199284
Threat Level
10/10
network avg: 7.8
+
Total Reports
6
network avg: 5
+
Network Thueringer Netkom GmbH has overall threat level 10/10
Geographic Comparison
Compared against 22,571 IPs in DE
Threat Level
10/10
country avg: 7.1
+
Total Reports
6
country avg: 26
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
5
WP Plugin Scanning
1
WP Version Scanning
1
WP Config Exposure
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,170,932 threat incidents tracked globally • Last 24h: 30,722 Logs
FEED
Top Threat Sources
-
01
Brazil258,282 22.1% -
02
United States198,284 16.9% -
03
India102,238 8.7% -
04
China49,394 4.2% -
05
Argentina41,842 3.6% -
06
SC29,404 2.5% -
07
Mexico27,333 2.3% -
08
Russia26,357 2.3% -
09
Colombia23,986 2% -
10
Germany22,556 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
7.3/10
Avg Threat
31%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,480
ISP
Feo Prest SRL
34.89.170.20
8/10
Confidence
100%
Reports
73
ISP
Google LLC
34.40.11.197
8/10
Confidence
100%
Reports
50
ISP
Google LLC
34.89.162.226
8/10
Confidence
100%
Reports
46
ISP
Google LLC
35.246.213.80
8/10
Confidence
100%
Reports
42
ISP
Google LLC
2a0e:d604:1:1ab::2
10/10
Confidence
100%
Reports
38
ISP
H2nexus Cloud S...
93.152.221.210
10/10
Confidence
100%
Reports
30
ISP
TechTies Inc.
35.198.76.170
8/10
Confidence
100%
Reports
28
ISP
Google LLC
93.152.221.36
10/10
Confidence
100%
Reports
25
ISP
TechTies Inc.
2600:3c17::2000:16ff:fe04:5586
10/10
Confidence
100%
Reports
18
ISP
Akamai Connecte...
213.165.52.39
10/10
Confidence
100%
Reports
17
ISP
Chsl One Ltd
2a0f:ca80:b00b:eff9::5
8/10
Confidence
99%
Reports
30
ISP
TechTies Inc.
35.246.249.43
10/10
Confidence
98%
Reports
112
ISP
Google LLC
35.198.92.138
8/10
Confidence
98%
Reports
64
ISP
Google LLC
34.179.185.147
10/10
Confidence
98%
Reports
57
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
25%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2001:4490:489d:3ca9:5de1:a570:7a96:17f
10/10
Confidence
25%
Reports
3
Location
IN
IN
2401:4900:1c5e:7214:dcf1:37c7:f988:9728
10/10
Confidence
25%
Reports
3
Location
IN
IN
207.175.104.14
10/10
Confidence
25%
Reports
3
Location
BE
BE
34.135.84.4
10/10
Confidence
25%
Reports
3
Location
US
US
34.70.87.192
10/10
Confidence
25%
Reports
3
Location
US
US
103.135.70.193
10/10
Confidence
25%
Reports
3
Location
IN
IN
173.244.42.169
10/10
Confidence
25%
Reports
7
Location
KR
KR
119.192.159.170
10/10
Confidence
25%
Reports
3
Location
KR
KR
117.6.160.77
10/10
Confidence
25%
Reports
4
Location
VN
VN
103.96.69.160
10/10
Confidence
25%
Reports
3
Location
BD
BD
106.202.50.46
10/10
Confidence
25%
Reports
3
Location
IN
IN
95.70.129.79
10/10
Confidence
25%
Reports
3
Location
TR
TR
2a0c:5a86:f502:800:58eb:338e:ceb7:83ef
10/10
Confidence
25%
Reports
3
Location
ES
ES
2401:4900:8837:196e:6c0d:6dca:afbf:672c
10/10
Confidence
25%
Reports
3
Location
IN
IN
102.220.12.234
10/10
Confidence
25%
Reports
3
Location
KE
KE