Substantial Risk
Threat level 8/10 for 93.177.64.139 based on 36 documented incidents.
Consistent suspicious behavior patterns. 94% confidence rating.
More threatening than 90% of monitored IPs
IP Address
93.177.64.139
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
netcup GmbH
ASN 197540
36
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
17
Hacking
11
Email Spam
2
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
22. August 2026
Last Activity
20. September 2026
Recent (7 days)
13 incidents
Reputable Network
This IP is hosted on a network (ASN 197540) with generally good reputation. The ISP netcup GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
5. Sep 2026 - 20. Sep 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host | Honeypot | 75% |
| New | Exploited Host | Honeypot | 75% |
| New | Exploited Host | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 93.177.64.139
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS197540
- ISP
- netcup GmbH
DNS Information
- Reverse DNS
- v2202502253716312771.bestsrv.de
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 36
- First Reported
- 22 Aug 2026
- Last Reported
- 20 Sep 2026, 15:16
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS197540
netcup GmbH
AT
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
79
Total IPs Monitored
1,112
Total Reports
14.1
Reports per IP
Network Context
This IP address belongs to netcup GmbH (AS197540), which manages 79 IP addresses in our monitoring system. Out of these, 1,112 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,658 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
36
avg: 9
++
Network Comparison
Compared against 254 IPs in ASN 197540
Threat Level
8/10
network avg: 6.6
+
Total Reports
36
network avg: 10
++
Network netcup GmbH has overall threat level 2/10
Geographic Comparison
Compared against 15,821 IPs in DE
Threat Level
8/10
country avg: 6.7
+
Total Reports
36
country avg: 34
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
5 Sep 2026
4 reports
Daily Average
1.2
reports/day
Most Active
Saturday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
21
Hacking
13
Email Spam
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
698,240 threat incidents tracked globally • Last 24h: 22,856 Logs
FEED
Top Threat Sources
-
01
United States134,916 19.3% -
02
Brazil109,420 15.7%
-
03
India75,799 10.9%
-
04
China43,116 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,472 2.4%
-
07
Argentina16,067 2.3%
-
08
Germany15,814 2.3%
-
09
Pakistan15,208 2.2%
-
10
Colombia15,077 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
89.58.31.106
10/10
Confidence
100%
Reports
106
Location
DE
DE
152.53.44.20
8/10
Confidence
100%
Reports
74
Location
AT
AT
152.53.0.56
10/10
Confidence
100%
Reports
45
Location
AT
AT
188.68.47.21
10/10
Confidence
100%
Reports
17
Location
DE
DE
152.53.185.81
10/10
Confidence
100%
Reports
15
Location
DE
DE
152.53.22.186
10/10
Confidence
97%
Reports
76
Location
DE
DE
202.61.233.195
8/10
Confidence
95%
Reports
35
Location
DE
DE
188.68.53.156
10/10
Confidence
94%
Reports
282
Location
DE
DE
152.53.139.238
10/10
Confidence
94%
Reports
38
Location
DE
DE
152.53.120.90
10/10
Confidence
94%
Reports
24
Location
AT
AT
91.204.46.157
10/10
Confidence
94%
Reports
12
Location
DE
DE
152.53.184.147
10/10
Confidence
93%
Reports
59
Location
AT
AT
89.58.10.55
10/10
Confidence
93%
Reports
10
Location
DE
DE
152.53.13.195
10/10
Confidence
93%
Reports
10
Location
DE
DE
152.53.147.88
10/10
Confidence
92%
Reports
13
Location
DE
DE
152.53.147.70
10/10
Confidence
91%
Reports
12
Location
DE
DE
2a03:4000::5d0:74dd:98ff:fe39:40cd
10/10
Confidence
89%
Reports
12
Location
DE
DE
152.53.191.99
8/10
Confidence
88%
Reports
153
Location
DE
DE
152.53.251.179
10/10
Confidence
87%
Reports
8
Location
AT
AT
152.53.230.230
10/10
Confidence
84%
Reports
7
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
542
ISP
Feo Prest SRL
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
164.92.161.148
10/10
Confidence
100%
Reports
130
ISP
DigitalOcean, LLC
148.251.47.87
8/10
Confidence
100%
Reports
114
ISP
Hetzner Online ...
94.26.106.216
8/10
Confidence
100%
Reports
109
ISP
dataforest GmbH
89.58.31.106
10/10
Confidence
100%
Reports
106
ISP
netcup GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
2a0f:ca80:b00b:1dc7::5
8/10
Confidence
100%
Reports
93
ISP
TechTies Inc.
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
217.160.212.27
8/10
Confidence
100%
Reports
76
ISP
IONOS SE
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
83.169.38.142
10/10
Confidence
100%
Reports
63
ISP
Host Europe GmbH
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
192.161.49.2
8/10
Confidence
94%
Reports
4,653
Location
US
US
66.163.122.211
10/10
Confidence
94%
Reports
4,231
Location
US
US
45.198.224.18
10/10
Confidence
94%
Reports
4,053
Location
US
US
5.187.35.26
8/10
Confidence
94%
Reports
3,724
Location
NL
NL
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
213.209.159.136
10/10
Confidence
94%
Reports
3,486
Location
TW
TW
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
5.187.35.142
8/10
Confidence
94%
Reports
3,018
Location
NL
NL
177.125.137.18
10/10
Confidence
94%
Reports
2,963
Location
MX
MX
45.205.1.110
10/10
Confidence
94%
Reports
2,318
Location
US
US
87.251.64.159
10/10
Confidence
94%
Reports
2,236
Location
US
US
91.92.40.66
10/10
Confidence
94%
Reports
2,101
Location
BG
BG
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2