High Risk
IP 5.83.135.249 rated at threat level 8/10 based on 116 security reports.
Pattern analysis reveals concerning activity. Confidence: 100%.
More threatening than 82% of monitored IPs
IP Address
5.83.135.249
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
active 1 GmbH
ASN 197071
116
Reports
Mixed
Data Source
Threat Categories
Brute-Force
15
WP Login Brute Force
13
WP User Enumeration
3
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
12. May 2026
Last Activity
7. June 2026
Recent (7 days)
18 incidents
Reputable Network
This IP is hosted on a network (ASN 197071) with generally good reputation. The ISP active 1 GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
27. May 2026 - 7. Jun 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 5.83.135.249
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS197071
- ISP
- active 1 GmbH
DNS Information
- Reverse DNS
- 5-83-135-249.altunhost.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 116
- First Reported
- 1 Apr 2026
- Last Reported
- 7 Jun 2026, 18:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS197071
active 1 GmbH
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
7
Total IPs Monitored
105
Total Reports
15
Reports per IP
Network Context
This IP address belongs to active 1 GmbH (AS197071), which manages 7 IP addresses in our monitoring system. Out of these, 105 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,215 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
116
avg: 23
++
Network Comparison
Compared against 7 IPs in ASN 197071
Threat Level
8/10
network avg: 6.9
+
Total Reports
116
network avg: 31
++
Network active 1 GmbH has overall threat level 2/10
Geographic Comparison
Compared against 7,138 IPs in DE
Threat Level
8/10
country avg: 5.8
+
Total Reports
116
country avg: 61
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 May 2026
7 reports
Daily Average
2.4
reports/day
Most Active
Sunday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
88
Brute-Force
26
WP User Enumeration
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 12 reports
Weekly Activity
Geographic Threat Distribution
186,914 threat incidents tracked globally • Last 24h: 18,893 Logs
FEED
Top Threat Sources
-
01
United States38,421 20.6% -
02
India28,931 15.5% -
03
China26,004 13.9% -
04
Brazil10,236 5.5% -
05
Germany7,138 3.8%
-
06
Singapore6,475 3.5% -
07
Indonesia5,522 3% -
08
Russia4,700 2.5% -
09
Pakistan4,646 2.5% -
10
Netherlands4,354 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
6
Related IPs
6.7/10
Avg Threat
71%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
5.83.135.109
8/10
Confidence
97%
Reports
30
Location
DE
DE
5.83.135.236
8/10
Confidence
92%
Reports
31
Location
DE
DE
5.175.206.224
8/10
Confidence
89%
Reports
19
Location
DE
DE
5.175.206.207
8/10
Confidence
71%
Reports
16
Location
DE
DE
82.29.5.150
8/10
Confidence
50%
Reports
4
Location
DE
DE
5.83.135.108
0/10
Confidence
29%
Reports
1
Location
DE
DE
IPs from the same subnet range, likely same network segment.
4
Related IPs
6/10
Avg Threat
80%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
128
ISP
Hetzner Online ...
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
207.154.230.149
10/10
Confidence
100%
Reports
33
ISP
DigitalOcean, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
78.142.18.172
8/10
Confidence
100%
Reports
578
Location
BG
BG
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
141.98.11.117
8/10
Confidence
100%
Reports
520
Location
LT
LT
208.109.188.137
8/10
Confidence
100%
Reports
513
Location
US
US
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
123.30.233.13
8/10
Confidence
100%
Reports
318
Location
VN
VN
103.76.120.219
8/10
Confidence
100%
Reports
310
Location
ID
ID
123.30.233.12
8/10
Confidence
100%
Reports
303
Location
VN
VN
116.118.2.113
8/10
Confidence
100%
Reports
296
Location
VN
VN
87.121.84.30
8/10
Confidence
100%
Reports
295
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203