Elevated Risk
Elevated threat level 8/10 for IP 85.204.70.90 from 8 reported incidents.
Behavioral profile indicates cyber threat activity with 36% confidence.
More threatening than 75% of monitored IPs
IP Address
85.204.70.90
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
FR
Location
Hydra Communications Ltd
ASN 25369
8
Reports
Mixed
Data Source
Threat Categories
Brute-Force
5
WP User Enumeration
3
WP Login Brute Force
3
Hacking
2
WP Plugin Exploit
1
WP REST API Abuse
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
2. June 2026
Last Activity
2. June 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 25369) with generally good reputation. The ISP Hydra Communications Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
30%
Medium Confidence
Confidence History
14. Nov 2025 - 2. Jun 2026
36%
Current
Stable
Trend
Security Reports (8)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking WP User Enumeration WP Plugin Exploit | Honeypot x8 | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP User Enumeration WP REST API Abuse | Community | 75% | |
| WP User Enumeration Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 85.204.70.90
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
FR
- ASN
- AS25369
- ISP
- Hydra Communications Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 8
- First Reported
- 14 Nov 2025
- Last Reported
- 2 Jun 2026, 16:42
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS25369
Hydra Communications Ltd
FR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
103
Total IPs Monitored
2,657
Total Reports
25.8
Reports per IP
Network Context
This IP address belongs to Hydra Communications Ltd (AS25369), which manages 103 IP addresses in our monitoring system. Out of these, 2,657 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
75
%
Global Threat Ranking
This IP is more threatening than 75% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 200,066 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
8
avg: 23
--
Network Comparison
Compared against 204 IPs in ASN 25369
Threat Level
8/10
network avg: 6.1
+
Total Reports
8
network avg: 14
-
Network Hydra Communications Ltd has overall threat level 2/10
Geographic Comparison
Compared against 4,072 IPs in FR
Threat Level
8/10
country avg: 5.8
+
Total Reports
8
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Jun 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Friday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
5
WP User Enumeration
3
WP Login Brute Force
3
Hacking
2
WP REST API Abuse
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,720 threat incidents tracked globally • Last 24h: 18,948 Logs
FEED
Top Threat Sources
-
01
United States38,493 20.5% -
02
India29,262 15.6% -
03
China26,047 13.9% -
04
Brazil10,264 5.5% -
05
Germany7,151 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,561 3% -
08
Russia4,712 2.5% -
09
Pakistan4,710 2.5% -
10
Netherlands4,363 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
10/10
Avg Threat
84%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
178.239.163.80
10/10
Confidence
94%
Reports
75
Location
GB
GB
193.176.31.147
10/10
Confidence
94%
Reports
25
Location
NL
NL
85.204.70.118
10/10
Confidence
90%
Reports
13
Location
FR
FR
185.38.148.2
10/10
Confidence
89%
Reports
15
Location
GB
GB
194.88.98.83
10/10
Confidence
88%
Reports
36
Location
DE
DE
185.223.235.6
10/10
Confidence
85%
Reports
11
Location
NL
NL
195.140.214.30
10/10
Confidence
84%
Reports
64
Location
GB
GB
195.140.214.24
10/10
Confidence
84%
Reports
29
Location
GB
GB
195.140.214.23
10/10
Confidence
84%
Reports
19
Location
GB
GB
194.88.98.92
10/10
Confidence
82%
Reports
100
Location
DE
DE
195.140.214.29
10/10
Confidence
82%
Reports
63
Location
GB
GB
195.140.214.25
10/10
Confidence
82%
Reports
27
Location
GB
GB
194.88.98.88
10/10
Confidence
82%
Reports
26
Location
DE
DE
194.88.98.91
10/10
Confidence
82%
Reports
23
Location
DE
DE
195.140.214.20
10/10
Confidence
82%
Reports
19
Location
GB
GB
37.10.113.215
10/10
Confidence
80%
Reports
24
Location
GB
GB
37.10.113.217
10/10
Confidence
80%
Reports
22
Location
GB
GB
194.88.98.82
10/10
Confidence
79%
Reports
136
Location
DE
DE
194.88.98.93
10/10
Confidence
79%
Reports
98
Location
DE
DE
194.88.98.94
10/10
Confidence
79%
Reports
96
Location
DE
DE
IPs from the same subnet range, likely same network segment.
13
Related IPs
7.8/10
Avg Threat
49%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
85.204.70.118
10/10
Confidence
90%
Reports
13
Location
FR
FR
85.204.70.88
8/10
Confidence
59%
Reports
4
Location
FR
FR
85.204.70.94
8/10
Confidence
58%
Reports
10
Location
FR
FR
85.204.70.92
10/10
Confidence
57%
Reports
6
Location
FR
FR
85.204.70.112
8/10
Confidence
50%
Reports
7
Location
FR
FR
85.204.70.106
8/10
Confidence
49%
Reports
7
Location
FR
FR
85.204.70.116
7/10
Confidence
48%
Reports
11
Location
FR
FR
85.204.70.114
7/10
Confidence
46%
Reports
10
Location
FR
FR
85.204.70.98
8/10
Confidence
42%
Reports
7
Location
FR
FR
85.204.70.96
7/10
Confidence
41%
Reports
7
Location
FR
FR
85.204.70.104
7/10
Confidence
38%
Reports
7
Location
FR
FR
85.204.70.100
7/10
Confidence
33%
Reports
3
Location
FR
FR
85.204.70.102
7/10
Confidence
29%
Reports
4
Location
FR
FR
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
92.205.109.21
8/10
Confidence
100%
Reports
287
ISP
Host Europe GmbH
82.196.25.136
8/10
Confidence
100%
Reports
228
ISP
Free Pro SAS
91.227.37.60
8/10
Confidence
100%
Reports
200
ISP
Eurofiber Franc...
163.172.31.86
10/10
Confidence
100%
Reports
138
ISP
Scaleway SAS
92.205.188.156
8/10
Confidence
100%
Reports
98
ISP
Host Europe GmbH
178.18.246.56
8/10
Confidence
100%
Reports
92
ISP
Contabo GmbH
194.163.139.224
10/10
Confidence
100%
Reports
72
ISP
Contabo GmbH
87.106.29.151
10/10
Confidence
100%
Reports
50
ISP
IONOS SE
51.38.192.10
8/10
Confidence
100%
Reports
42
ISP
OVH SAS
54.36.102.244
8/10
Confidence
100%
Reports
34
ISP
OVH SAS
84.247.129.9
8/10
Confidence
100%
Reports
31
ISP
Contabo GmbH
54.37.84.217
10/10
Confidence
100%
Reports
31
ISP
OVH SAS
46.105.28.235
10/10
Confidence
100%
Reports
27
ISP
OVH SAS
51.91.98.45
10/10
Confidence
100%
Reports
27
ISP
OVH SAS
193.42.61.12
10/10
Confidence
100%
Reports
25
ISP
velia.net Inter...
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
36%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
173.230.155.59
10/10
Confidence
36%
Reports
80
Location
US
US
45.79.67.203
10/10
Confidence
36%
Reports
79
Location
US
US
152.32.128.85
8/10
Confidence
36%
Reports
63
Location
HK
HK
159.223.155.243
10/10
Confidence
36%
Reports
43
Location
US
US
134.209.220.100
10/10
Confidence
36%
Reports
42
Location
US
US
185.193.157.163
8/10
Confidence
36%
Reports
38
Location
US
US
34.74.242.206
8/10
Confidence
36%
Reports
34
Location
US
US
4.204.8.222
8/10
Confidence
36%
Reports
31
Location
CA
CA
43.153.193.178
8/10
Confidence
36%
Reports
29
Location
SG
SG
123.139.116.126
10/10
Confidence
36%
Reports
22
Location
CN
CN
34.19.127.200
10/10
Confidence
36%
Reports
16
Location
US
US
37.114.63.5
8/10
Confidence
36%
Reports
13
Location
DE
DE
149.102.254.20
8/10
Confidence
36%
Reports
13
Location
US
US
205.185.127.174
7/10
Confidence
36%
Reports
13
Location
US
US
68.183.180.73
8/10
Confidence
36%
Reports
13
Location
SG
SG
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203