Significant Threat
IP 5.175.206.207 identified as significant threat (8/10) from 16 events.
Multiple malicious indicators detected. Confidence level: 71%.
More threatening than 79% of monitored IPs
IP Address
5.175.206.207
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
active 1 GmbH
ASN 197071
16
Reports
Honeypot
Data Source
Threat Categories
WP Login Brute Force
16
Reputable Network
This IP is hosted on a network (ASN 197071) with generally good reputation. The ISP active 1 GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
67%
High Confidence
Confidence History
9. Jan 2026 - 29. Mar 2026
71%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.175.206.207
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS197071
- ISP
- active 1 GmbH
DNS Information
- Reverse DNS
- 5-175-206-207.altunhost.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 16
- First Reported
- 9 Jan 2026
- Last Reported
- 29 Mar 2026, 09:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS197071
active 1 GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
7
Total IPs Monitored
105
Total Reports
15
Reports per IP
Network Context
This IP address belongs to active 1 GmbH (AS197071), which manages 7 IP addresses in our monitoring system. Out of these, 105 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,471 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
16
avg: 23
-
Network Comparison
Compared against 7 IPs in ASN 197071
Threat Level
8/10
network avg: 6.9
+
Total Reports
16
network avg: 31
-
Network active 1 GmbH has overall threat level 2/10
Geographic Comparison
Compared against 7,142 IPs in DE
Threat Level
8/10
country avg: 5.8
+
Total Reports
16
country avg: 61
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
16
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8%
-
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
6
Related IPs
6.7/10
Avg Threat
76%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
5.83.135.249
8/10
Confidence
100%
Reports
116
Location
DE
DE
5.83.135.109
8/10
Confidence
97%
Reports
30
Location
DE
DE
5.83.135.236
8/10
Confidence
92%
Reports
31
Location
DE
DE
5.175.206.224
8/10
Confidence
89%
Reports
19
Location
DE
DE
82.29.5.150
8/10
Confidence
50%
Reports
4
Location
DE
DE
5.83.135.108
0/10
Confidence
29%
Reports
1
Location
DE
DE
IPs from the same subnet range, likely same network segment.
2
Related IPs
8/10
Avg Threat
81%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
128
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
71%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2.57.122.238
10/10
Confidence
71%
Reports
13,914
Location
RO
RO
80.94.92.168
10/10
Confidence
71%
Reports
2,254
Location
RO
RO
147.185.133.232
10/10
Confidence
71%
Reports
1,897
Location
US
US
35.203.210.123
10/10
Confidence
71%
Reports
1,258
Location
GB
GB
91.224.92.114
10/10
Confidence
71%
Reports
1,242
Location
GB
GB
162.216.150.69
10/10
Confidence
71%
Reports
1,077
Location
US
US
103.174.114.164
10/10
Confidence
71%
Reports
1,063
Location
ID
ID
43.167.235.177
10/10
Confidence
71%
Reports
927
Location
JP
JP
86.54.24.21
10/10
Confidence
71%
Reports
873
Location
LV
LV
106.245.174.79
10/10
Confidence
71%
Reports
810
Location
KR
KR
147.185.133.233
10/10
Confidence
71%
Reports
644
Location
US
US
118.193.57.121
8/10
Confidence
71%
Reports
631
Location
TH
TH
35.203.210.203
10/10
Confidence
71%
Reports
622
Location
GB
GB
118.194.251.145
8/10
Confidence
71%
Reports
555
Location
TH
TH
162.216.149.205
10/10
Confidence
71%
Reports
549
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203