High Risk
IP 91.99.122.209 rated at threat level 7/10 based on 2 security reports.
Pattern analysis reveals concerning activity. Confidence: 40%.
More threatening than 88% of monitored IPs
IP Address
91.99.122.209
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
Hetzner Online GmbH
ASN 24940
2
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
2
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
6. November 2026
Last Activity
6. November 2026
Recent (7 days)
2 incidents
Datacenter Infrastructure
This IP is allocated from datacenter space operated by Hetzner Online GmbH. Datacenter IPs used for attacks often indicate intentional malicious infrastructure.
Purpose-provisioned attack infrastructure may represent more sophisticated threat actors.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
4/10
Low
Confidence Score
40%
Medium Confidence
Confidence History
6. Nov 2026
40%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host | Honeypot | 75% |
| New | Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 91.99.122.209
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS24940
- ISP
- Hetzner Online GmbH
DNS Information
- Reverse DNS
- static.209.122.99.91.clients.your-server.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 2
- First Reported
- 6 Nov 2026
- Last Reported
- 6 Nov 2026, 12:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24940
Hetzner Online GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
501
Total IPs Monitored
58,930
Total Reports
117.6
Reports per IP
Network Context
This IP address belongs to Hetzner Online GmbH (AS24940), which manages 501 IP addresses in our monitoring system. Out of these, 58,930 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,328,234 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
2
avg: 7
--
Network Comparison
Compared against 2,426 IPs in ASN 24940
Threat Level
7/10
network avg: 7.0
=
Total Reports
2
network avg: 35
--
Network Hetzner Online GmbH has overall threat level 2/10
Geographic Comparison
Compared against 24,408 IPs in DE
Threat Level
7/10
country avg: 7.1
=
Total Reports
2
country avg: 25
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Nov 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Friday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,210,746 threat incidents tracked globally • Last 24h: 32,818 Logs
FEED
Top Threat Sources
-
01
Brazil261,155 21.6% -
02
United States207,412 17.1% -
03
India103,518 8.5% -
04
China50,996 4.2% -
05
Argentina42,423 3.5% -
06
SC29,448 2.4% -
07
Mexico27,930 2.3% -
08
Russia26,998 2.2% -
09
Germany24,428 2%
-
10
Colombia24,273 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.7/10
Avg Threat
79%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
2.29.112.91
10/10
Confidence
96%
Reports
15
Location
FI
FI
213.239.255.120
10/10
Confidence
94%
Reports
14
Location
DE
DE
178.63.197.160
10/10
Confidence
92%
Reports
17
Location
DE
DE
94.130.226.243
10/10
Confidence
91%
Reports
18
Location
DE
DE
178.105.31.42
10/10
Confidence
91%
Reports
16
Location
DE
DE
144.76.32.117
6/10
Confidence
89%
Reports
494
Location
DE
DE
144.76.159.59
10/10
Confidence
86%
Reports
377
Location
DE
DE
65.109.22.141
10/10
Confidence
85%
Reports
314
Location
FI
FI
136.243.212.93
6/10
Confidence
83%
Reports
25
Location
DE
DE
62.238.11.208
10/10
Confidence
77%
Reports
12
Location
FI
FI
116.203.18.194
8/10
Confidence
75%
Reports
12
Location
DE
DE
2a01:4f8:c012:4640::1
10/10
Confidence
73%
Reports
52,575
Location
DE
DE
65.108.2.171
10/10
Confidence
72%
Reports
21
Location
FI
FI
178.105.183.10
7/10
Confidence
71%
Reports
20
Location
DE
DE
167.233.195.205
8/10
Confidence
71%
Reports
16
Location
DE
DE
65.109.236.138
8/10
Confidence
70%
Reports
17
Location
FI
FI
2a01:4f8:173:1383::2
7/10
Confidence
68%
Reports
7
Location
DE
DE
65.108.125.120
8/10
Confidence
67%
Reports
19
Location
FI
FI
204.168.204.232
8/10
Confidence
66%
Reports
10
Location
DE
DE
167.233.196.216
8/10
Confidence
64%
Reports
9
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.198.76.170
8/10
Confidence
100%
Reports
61
ISP
Google LLC
2a0e:d604:1:1ab::2
10/10
Confidence
100%
Reports
49
ISP
H2nexus Cloud S...
35.198.107.220
10/10
Confidence
100%
Reports
45
ISP
Google LLC
213.209.159.208
10/10
Confidence
99%
Reports
1,480
ISP
Feo Prest SRL
2a14:c380:1300:175::a
8/10
Confidence
99%
Reports
17
ISP
Netiface Americ...
34.89.162.226
8/10
Confidence
98%
Reports
46
ISP
Google LLC
172.105.76.7
10/10
Confidence
98%
Reports
30
ISP
Akamai Connecte...
35.246.157.1
10/10
Confidence
98%
Reports
22
ISP
Google LLC
34.185.152.112
10/10
Confidence
98%
Reports
21
ISP
Google LLC
2a0f:ca80:b00b:39ec::5
8/10
Confidence
98%
Reports
16
ISP
TechTies Inc.
34.89.170.20
8/10
Confidence
96%
Reports
73
ISP
Google LLC
91.92.240.251
8/10
Confidence
96%
Reports
61
ISP
Omegatech LTD
93.152.221.108
8/10
Confidence
96%
Reports
59
ISP
TechTies Inc.
93.152.221.37
8/10
Confidence
96%
Reports
57
ISP
TechTies Inc.
93.152.221.206
8/10
Confidence
96%
Reports
41
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
6.7/10
Avg Threat
40%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
91.216.213.141
7/10
Confidence
40%
Reports
3
Location
PL
PL
91.230.98.72
7/10
Confidence
40%
Reports
3
Location
PL
PL
2.58.216.177
7/10
Confidence
40%
Reports
3
Location
PL
PL
2602:80d:1007::2b
6/10
Confidence
40%
Reports
3
Location
US
US
31.105.99.58
6/10
Confidence
40%
Reports
5
Location
US
US
46.105.78.64
5/10
Confidence
40%
Reports
3
Location
FR
FR
1.14.170.214
7/10
Confidence
40%
Reports
2
Location
CN
CN
103.91.128.163
7/10
Confidence
40%
Reports
2
Location
BD
BD
103.91.128.62
7/10
Confidence
40%
Reports
2
Location
BD
BD
34.12.216.26
6/10
Confidence
40%
Reports
2
Location
NL
NL
103.77.252.173
7/10
Confidence
40%
Reports
2
Location
BD
BD
103.77.252.151
7/10
Confidence
40%
Reports
2
Location
BD
BD
123.53.227.109
7/10
Confidence
40%
Reports
2
Location
CN
CN
103.153.130.13
7/10
Confidence
40%
Reports
2
Location
BD
BD
103.91.128.41
7/10
Confidence
40%
Reports
2
Location
BD
BD