Measured Risk
IP 94.249.186.139 threat rating: 5/10 from 1 observations.
Attention-worthy behavior detected. Confidence: 21%.
More threatening than 24% of monitored IPs
IP Address
94.249.186.139
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Minimal Concern
Germany
Location
Tom Gewiese
ASN 215365
1
Reports
Community
Data Source
Threat Categories
Bad Web Bot
1
Web App Attack
1
Technical Details
Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.
Recommended Mitigations
Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
31. October 2026
Last Activity
31. October 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 215365) with generally good reputation. The ISP Tom Gewiese maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Standard security protocols sufficient. Monitor but no immediate blocking required.
Long-term blocking recommended.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
2/10
Very Low
Confidence Score
13%
Low Confidence
Security Reports (1)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Bad Web Bot Web App Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 94.249.186.139
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS215365
- ISP
- Tom Gewiese
DNS Information
- Reverse DNS
- threatoff.eu
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 1
- First Reported
- 31 Oct 2026
- Last Reported
- 31 Oct 2026, 04:41
Comparative Analysis
How this IP compares to others in our threat intelligence database
24
%
Global Threat Ranking
This IP is more threatening than 24% of all IPs in our database.
Low Threat PercentileGlobal Comparison
Compared against 1,352,091 reported IPs worldwide
Threat Level
5/10
avg: 6.0
-
Total Reports
1
avg: 7
--
Network Comparison
Compared against 18 IPs in ASN 215365
Threat Level
5/10
network avg: 6.4
-
Total Reports
1
network avg: 1
-
Geographic Comparison
Compared against 25,867 IPs in DE
Threat Level
5/10
country avg: 7.0
-
Total Reports
1
country avg: 24
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
31 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Saturday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Bad Web Bot
1
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,232,363 threat incidents tracked globally • Last 24h: 20,563 Logs
FEED
Top Threat Sources
-
01
Brazil261,723 21.2% -
02
United States213,624 17.3% -
03
India104,161 8.5% -
04
China52,537 4.3% -
05
Argentina42,607 3.5% -
06
SC29,487 2.4% -
07
Mexico28,150 2.3% -
08
Russia27,412 2.2% -
09
Germany25,867 2.1%
-
10
Colombia24,360 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
17
Related IPs
6.5/10
Avg Threat
23%
Avg Confidence
7
High Threat
Elevated risk: Multiple related IPs are flagged
94.249.195.169
7/10
Confidence
40%
Reports
2
Location
DE
DE
77.90.15.5
6/10
Confidence
28%
Reports
2
Location
DE
DE
94.249.177.62
7/10
Confidence
26%
Reports
1
Location
DE
DE
94.249.177.61
7/10
Confidence
26%
Reports
1
Location
DE
DE
94.249.177.159
7/10
Confidence
26%
Reports
1
Location
DE
DE
94.249.177.156
7/10
Confidence
26%
Reports
1
Location
DE
DE
5.231.119.205
10/10
Confidence
24%
Reports
3
Location
DE
DE
94.249.195.178
6/10
Confidence
24%
Reports
2
Location
DE
DE
77.90.63.48
6/10
Confidence
23%
Reports
1
Location
DE
DE
5.231.118.61
6/10
Confidence
23%
Reports
1
Location
NL
NL
5.231.118.136
6/10
Confidence
23%
Reports
1
Location
DE
DE
77.90.63.246
6/10
Confidence
23%
Reports
1
Location
DE
DE
5.231.123.85
6/10
Confidence
22%
Reports
1
Location
DE
DE
77.90.63.252
6/10
Confidence
22%
Reports
1
Location
NL
NL
94.249.186.191
5/10
Confidence
20%
Reports
1
Location
DE
DE
5.231.117.128
6/10
Confidence
19%
Reports
1
Location
DE
DE
77.90.63.222
7/10
Confidence
1%
Reports
1
Location
NL
NL
IPs from the same subnet range, likely same network segment.
1
Related IPs
5/10
Avg Threat
20%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a0e:d604:1:1ab::2
8/10
Confidence
100%
Reports
54
ISP
H2nexus Cloud S...
41.216.189.147
8/10
Confidence
96%
Reports
264
ISP
Private-Hosting...
93.152.221.108
8/10
Confidence
96%
Reports
59
ISP
TechTies Inc.
31.77.15.157
8/10
Confidence
96%
Reports
52
ISP
Fzco
85.155.14.245
10/10
Confidence
96%
Reports
39
ISP
SolidCore Hosti...
85.155.14.246
10/10
Confidence
96%
Reports
38
ISP
SolidCore Hosti...
85.155.14.247
10/10
Confidence
96%
Reports
37
ISP
SolidCore Hosti...
85.155.15.14
7/10
Confidence
96%
Reports
29
ISP
SolidCore Hosti...
77.90.185.244
10/10
Confidence
96%
Reports
22
ISP
Limited Network...
85.155.15.23
7/10
Confidence
96%
Reports
17
ISP
SolidCore Hosti...
34.179.168.163
10/10
Confidence
96%
Reports
15
ISP
Google LLC
172.105.76.7
10/10
Confidence
95%
Reports
33
ISP
Akamai Connecte...
46.128.202.246
10/10
Confidence
94%
Reports
1,298
ISP
Tele Columbus AG
62.214.224.59
10/10
Confidence
94%
Reports
824
ISP
1&1 Versatel GmbH
62.214.226.95
10/10
Confidence
94%
Reports
823
ISP
1&1 Versatel GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
21%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.15.81.4
10/10
Confidence
21%
Reports
3
Location
IN
IN
95.70.248.89
10/10
Confidence
21%
Reports
3
Location
TR
TR
88.247.41.60
10/10
Confidence
21%
Reports
3
Location
TR
TR
177.214.99.25
10/10
Confidence
21%
Reports
3
Location
BR
BR
110.38.243.15
10/10
Confidence
21%
Reports
3
Location
PK
PK
2001:1a40:1428:8700:29af:4fb4:b20:66c0
10/10
Confidence
21%
Reports
3
Location
BH
BH
2401:4900:7663:fedd:c4e2:5983:7817:4b0d
10/10
Confidence
21%
Reports
3
Location
IN
IN
2001:fd8:4624:3400:fd80:423b:7411:13d3
10/10
Confidence
21%
Reports
3
Location
PH
PH
125.62.196.126
10/10
Confidence
21%
Reports
3
Location
IN
IN
45.160.89.223
10/10
Confidence
21%
Reports
3
Location
BR
BR
2001:4453:474:a00:28da:3851:64d6:45e8
10/10
Confidence
21%
Reports
3
Location
PH
PH
105.157.134.255
10/10
Confidence
21%
Reports
3
Location
MA
MA
2804:34b8:752:1901:fd4d:7455:61e5:d75d
10/10
Confidence
21%
Reports
3
Location
BR
BR
27.79.142.138
10/10
Confidence
21%
Reports
3
Location
VN
VN
2804:14c:65c3:8c97:495a:9434:6bf5:5e8
10/10
Confidence
21%
Reports
3
Location
BR
BR