IP Address

193.24.211.71

IPv4 Public
DE DE
AS215929
Data Campus Limited
1,048 Reports
This IP is under Observation Suspicious activity detected - monitor closely
10/10 Threat
65% Confidence
1,048 Reports

Threat Intelligence Analysis

AI-generated security assessment based on aggregated threat data

Top 10% High Threat
DE
DE Location
Data Campus Limited ASN 215929
1,048 Reports
Honeypot Data Source

Critical Alert

193.24.211.71 is a critical-risk address associated with SSH brute-force attack activity targeting server authentication systems, with a threat level score of 10/10 and 1048 total abuse reports logged against this single endpoint. The IP originates from Germany and is allocated to Data Campus Limited (ASN AS215929), with hostile activity documented between September and October 2025.

Automated honeypot sensors recorded 20 SSH-based attack attempts attributed to 193.24.211.71, representing the dominant threat category in recent reporting periods. The detection confidence stands at 65%, indicating moderate certainty in the attribution. Notably, the activity frequency metric of 0/10 suggests a recent lull in hostile probes, though the substantial volume of historical reports underscores persistent threat behaviour from this address. Fail2ban systems specifically detected and blocked sshd authentication attempts, confirming active exploitation of the SSH protocol as the attack vector.

SSH brute-force attacks represent a well-established initial access technique where threat actors systematically attempt credential combinations against exposed SSH services to compromise server infrastructure. The real-world risk includes unauthorized server access, data exfiltration, lateral movement within networks, and potential deployment of secondary payloads such as cryptocurrency miners or ransomware. Even failed attempts consume server resources and generate security noise that can mask more sophisticated intrusion attempts.

Site operators should immediately block 193.24.211.71 at the network perimeter firewall and implement key-based authentication exclusively, eliminating reliance on password credentials that brute-force attacks exploit. Changing the default SSH port reduces exposure to automated scanning tools, while deploying fail2ban or equivalent intrusion prevention software provides automated blocking of repeated authentication failures from this address. Enforcing strict IP allowlisting for SSH access where operationally feasible further hardens the attack surface.

More threatening than 91% of monitored IPs

Threat Categories

SSH 30

Technical Details

SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.

Recommended Mitigations

Use key-based authentication, change default ports, implement fail2ban, and disable root login.

Reputable Network

This IP is hosted on a network (ASN 215929) with generally good reputation. The ISP Data Campus Limited maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Continue monitoring for emerging patterns.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 10/10 Critical
Critical
Activity Frequency 0/10 Inactive
Confidence Score 65% High Confidence

Confidence History

22. Oct 2025
65% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%

Technical Details

Basic Information

IP Address
193.24.211.71
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class C

Geolocation

Country
DE DE
ASN
AS215929
ISP
Data Campus Limited

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
1,048
First Reported
29 Sep 2025
Last Reported
22 Oct 2025, 12:53

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS215929
Data Campus Limited
DE DE

Network Threat Assessment

3/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

15
Total IPs Monitored
2,002
Total Reports
133.5
Reports per IP

Network Context

This IP address belongs to Data Campus Limited (AS215929), which manages 15 IP addresses in our monitoring system. Out of these, 2,002 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

91 %

Global Threat Ranking

This IP is more threatening than 91% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 198,782 reported IPs worldwide

Threat Level 10/10 avg: 5.3 ++
Total Reports 1,048 avg: 23 ++

Network Comparison

Compared against 23 IPs in ASN 215929

Threat Level 10/10 network avg: 7.8 +
Total Reports 1,048 network avg: 154 ++
Network Data Campus Limited has overall threat level 3/10

Geographic Comparison

Compared against 7,133 IPs in DE

Threat Level 10/10 country avg: 5.8 ++
Total Reports 1,048 country avg: 61 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

186,538 threat incidents tracked globally • Last 24h: 18,649 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    38,338 20.6%
  2. 02
    IN
    India IN
    28,859 15.5%
  3. 03
    CN
    China CN
    25,971 13.9%
  4. 04
    BR
    Brazil BR
    10,208 5.5%
  5. 05
    DE
    Germany DE THIS IP
    7,133 3.8%
  6. 06
    SG
    Singapore SG
    6,457 3.5%
  7. 07
    ID
    Indonesia ID
    5,497 2.9%
  8. 08
    RU
    Russia RU
    4,694 2.5%
  9. 09
    PK
    Pakistan PK
    4,635 2.5%
  10. 10
    NL
    Netherlands NL
    4,351 2.3%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
8.5/10 Avg Threat
73% Avg Confidence
18 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "193.24.211.71",
    "threat_level": 10,
    "confidence_score": 65,
    "total_reports": 1048,
    "country_code": "DE",
    "isp_name": "Data Campus Limited",
    "asn": "215929",
    "first_reported": "2025-09-29 06:18:40",
    "last_reported": "2025-10-22 12:53:26",
    "exported_at": "2026-06-09T00:55:30+02:00",
    "source": "https://reportedip.de/ip/193.24.211.71/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.