Elevated Risk
Elevated threat level 7/10 for IP 158.94.210.112 from 2 reported incidents.
Behavioral profile indicates cyber threat activity with 28% confidence.
More threatening than 59% of monitored IPs
IP Address
158.94.210.112
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
DE
Location
metaspinner net GmbH
ASN 209800
2
Reports
Honeypot
Data Source
Threat Categories
Hacking
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 209800) with generally good reputation. The ISP metaspinner net GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
25%
Low Confidence
Confidence History
26. Nov 2025
28%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 158.94.210.112
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS209800
- ISP
- metaspinner net GmbH
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 26 Nov 2025
- Last Reported
- 26 Nov 2025, 14:06
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS209800
metaspinner net GmbH
NL
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
29
Total IPs Monitored
3,144
Total Reports
108.4
Reports per IP
Network Context
This IP address belongs to metaspinner net GmbH (AS209800), which manages 29 IP addresses in our monitoring system. Out of these, 3,144 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
59
%
Global Threat Ranking
This IP is more threatening than 59% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,335 reported IPs worldwide
Threat Level
7/10
avg: 5.3
+
Total Reports
2
avg: 23
--
Network Comparison
Compared against 29 IPs in ASN 209800
Threat Level
7/10
network avg: 9.1
-
Total Reports
2
network avg: 121
--
Network metaspinner net GmbH has overall threat level 1/10
Geographic Comparison
Compared against 7,139 IPs in DE
Threat Level
7/10
country avg: 5.8
+
Total Reports
2
country avg: 61
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8%
-
06
Singapore6,475 3.5% -
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
72%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
158.94.209.202
10/10
Confidence
81%
Reports
51
Location
DE
DE
158.94.209.195
10/10
Confidence
80%
Reports
80
Location
DE
DE
158.94.209.199
10/10
Confidence
80%
Reports
63
Location
DE
DE
158.94.209.201
10/10
Confidence
79%
Reports
148
Location
DE
DE
91.92.242.56
10/10
Confidence
72%
Reports
50
Location
NL
NL
91.92.241.242
10/10
Confidence
71%
Reports
425
Location
NL
NL
91.92.240.131
10/10
Confidence
71%
Reports
100
Location
DE
DE
91.92.240.239
10/10
Confidence
71%
Reports
77
Location
DE
DE
91.92.240.237
10/10
Confidence
71%
Reports
73
Location
DE
DE
91.92.241.224
10/10
Confidence
71%
Reports
70
Location
NL
NL
91.92.241.206
10/10
Confidence
71%
Reports
56
Location
NL
NL
91.92.241.204
10/10
Confidence
71%
Reports
43
Location
NL
NL
91.92.240.127
10/10
Confidence
71%
Reports
42
Location
DE
DE
91.92.241.246
10/10
Confidence
71%
Reports
29
Location
NL
NL
91.92.240.133
10/10
Confidence
71%
Reports
28
Location
DE
DE
91.92.240.132
10/10
Confidence
71%
Reports
22
Location
DE
DE
91.92.240.199
10/10
Confidence
69%
Reports
19
Location
DE
DE
91.92.242.109
10/10
Confidence
68%
Reports
876
Location
NL
NL
158.94.208.11
5/10
Confidence
64%
Reports
100
Location
DE
DE
91.92.241.226
8/10
Confidence
63%
Reports
62
Location
NL
NL
IPs from the same subnet range, likely same network segment.
18
Related IPs
4.3/10
Avg Threat
42%
Avg Confidence
8
High Threat
Elevated risk: Multiple related IPs are flagged
158.94.210.72
8/10
Confidence
100%
Reports
77
Location
NL
NL
158.94.210.29
10/10
Confidence
73%
Reports
150
Location
NL
NL
158.94.210.44
7/10
Confidence
67%
Reports
75
Location
NL
NL
158.94.210.190
7/10
Confidence
59%
Reports
604
Location
NL
NL
158.94.210.39
5/10
Confidence
58%
Reports
1,682
Location
NL
NL
158.94.210.48
0/10
Confidence
47%
Reports
3
Location
NL
NL
158.94.210.98
7/10
Confidence
46%
Reports
3
Location
NL
NL
158.94.210.60
0/10
Confidence
35%
Reports
2
Location
NL
NL
158.94.210.69
5/10
Confidence
35%
Reports
2
Location
NL
NL
158.94.210.42
0/10
Confidence
33%
Reports
2
Location
NL
NL
158.94.210.228
0/10
Confidence
33%
Reports
2
Location
NL
NL
158.94.210.216
7/10
Confidence
30%
Reports
1
Location
NL
NL
158.94.210.128
0/10
Confidence
29%
Reports
1
Location
NL
NL
158.94.210.136
7/10
Confidence
27%
Reports
3
Location
NL
NL
158.94.210.75
0/10
Confidence
27%
Reports
1
Location
NL
NL
158.94.210.118
4/10
Confidence
25%
Reports
2
Location
NL
NL
158.94.210.67
7/10
Confidence
23%
Reports
1
Location
DE
DE
158.94.210.119
4/10
Confidence
15%
Reports
1
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
128
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
28%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
178.128.211.158
7/10
Confidence
28%
Reports
210
Location
SG
SG
91.231.89.178
7/10
Confidence
28%
Reports
128
Location
FR
FR
146.190.80.186
7/10
Confidence
28%
Reports
56
Location
SG
SG
95.85.238.22
8/10
Confidence
28%
Reports
53
Location
CZ
CZ
82.165.60.30
8/10
Confidence
28%
Reports
43
Location
DE
DE
103.198.133.12
7/10
Confidence
28%
Reports
29
Location
BD
BD
103.139.144.122
7/10
Confidence
28%
Reports
22
Location
BD
BD
212.90.148.8
8/10
Confidence
28%
Reports
17
Location
DE
DE
208.84.102.151
8/10
Confidence
28%
Reports
16
Location
US
US
185.126.82.201
8/10
Confidence
28%
Reports
16
Location
US
US
20.64.105.243
7/10
Confidence
28%
Reports
11
Location
US
US
203.161.43.55
7/10
Confidence
28%
Reports
10
Location
US
US
109.199.114.14
7/10
Confidence
28%
Reports
10
Location
DE
DE
47.98.255.122
7/10
Confidence
28%
Reports
10
Location
CN
CN
1.192.192.8
7/10
Confidence
28%
Reports
10
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203