Extreme Threat
IP 185.197.195.89 classified at threat level 10/10 with 18 documented attacks.
Advanced threat indicators confirmed with 47% certainty.
More threatening than 84% of monitored IPs
IP Address
185.197.195.89
IPv4
Public
DE
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Above Average Risk
DE
Location
Contabo GmbH
ASN 51167
18
Reports
Mixed
Data Source
Threat Categories
WP Login Brute Force
11
Brute-Force
7
Hacking
6
WP XML-RPC Brute Force
6
Web App Attack
1
Reputable Network
This IP is hosted on a network (ASN 51167) with generally good reputation. The ISP Contabo GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
47%
Medium Confidence
Confidence History
18. Aug 2025 - 9. Oct 2025
47%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP XML-RPC Brute Force Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 185.197.195.89
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS51167
- ISP
- Contabo GmbH
DNS Information
- Reverse DNS
- vmi3301326.contaboserver.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 18 Aug 2025
- Last Reported
- 9 Oct 2025, 13:56
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS51167
Contabo GmbH
FR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
778
Total IPs Monitored
28,942
Total Reports
37.2
Reports per IP
Network Context
This IP address belongs to Contabo GmbH (AS51167), which manages 778 IP addresses in our monitoring system. Out of these, 28,942 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 154,425 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
18
avg: 28
-
Network Comparison
Compared against 996 IPs in ASN 51167
Threat Level
10/10
network avg: 4.5
++
Total Reports
18
network avg: 29
-
Network Contabo GmbH has overall threat level 2/10
Geographic Comparison
Compared against 6,161 IPs in DE
Threat Level
10/10
country avg: 5.3
++
Total Reports
18
country avg: 68
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Saturday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
11
Brute-Force
7
WP XML-RPC Brute Force
6
Hacking
6
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
145,884 threat incidents tracked globally • Last 24h: 18,538 Logs
FEED
Top Threat Sources
-
01
United States32,877 22.5% -
02
China23,531 16.1% -
03
India15,891 10.9% -
04
Brazil7,091 4.9% -
05
Germany6,161 4.2%
-
06
Singapore5,769 4% -
07
Indonesia4,043 2.8% -
08
Netherlands3,774 2.6% -
09
Russia3,709 2.5% -
10
United Kingdom3,683 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
Location
DE
DE
178.18.246.56
8/10
Confidence
100%
Reports
92
Location
FR
FR
84.247.129.9
10/10
Confidence
100%
Reports
20
Location
FR
FR
5.189.128.80
8/10
Confidence
100%
Reports
19
Location
FR
FR
173.249.50.59
8/10
Confidence
99%
Reports
79
Location
FR
FR
158.220.126.105
8/10
Confidence
99%
Reports
32
Location
FR
FR
173.249.41.171
10/10
Confidence
98%
Reports
90
Location
FR
FR
109.199.127.9
8/10
Confidence
98%
Reports
40
Location
FR
FR
161.97.68.122
10/10
Confidence
98%
Reports
20
Location
FR
FR
173.212.228.191
10/10
Confidence
97%
Reports
68
Location
FR
FR
144.91.126.77
8/10
Confidence
97%
Reports
66
Location
FR
FR
158.220.126.85
8/10
Confidence
97%
Reports
37
Location
FR
FR
173.249.45.217
8/10
Confidence
97%
Reports
31
Location
FR
FR
62.171.175.31
8/10
Confidence
97%
Reports
18
Location
FR
FR
38.242.146.40
8/10
Confidence
97%
Reports
12
Location
FR
FR
89.116.31.97
10/10
Confidence
96%
Reports
64
Location
FR
FR
173.249.7.118
8/10
Confidence
95%
Reports
22
Location
FR
FR
161.97.182.206
10/10
Confidence
94%
Reports
201
Location
FR
FR
62.169.24.30
10/10
Confidence
94%
Reports
63
Location
FR
FR
94.250.201.185
10/10
Confidence
94%
Reports
39
Location
DE
DE
IPs from the same subnet range, likely same network segment.
1
Related IPs
0/10
Avg Threat
40%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
118.193.59.142
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
95.89.149.179
10/10
Confidence
100%
Reports
67
ISP
Vodafone GmbH
80.158.109.51
10/10
Confidence
100%
Reports
61
ISP
T-Systems Inter...
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
213.209.159.151
10/10
Confidence
100%
Reports
28
ISP
Dgn Teknoloji A.s.
207.154.230.149
10/10
Confidence
100%
Reports
25
ISP
DigitalOcean, LLC
84.233.216.142
8/10
Confidence
100%
Reports
16
ISP
Datacamp Limited
83.97.23.180
8/10
Confidence
100%
Reports
14
ISP
M247 Europe SRL
89.163.151.66
8/10
Confidence
100%
Reports
14
ISP
WIIT AG
130.12.181.102
8/10
Confidence
99%
Reports
1,225
ISP
Netiface LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
47%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.197.69.115
10/10
Confidence
47%
Reports
47
Location
US
US
185.220.100.253
8/10
Confidence
47%
Reports
43
Location
DE
DE
169.150.203.237
8/10
Confidence
47%
Reports
41
Location
US
US
50.116.9.129
10/10
Confidence
47%
Reports
40
Location
US
US
185.200.240.65
10/10
Confidence
47%
Reports
40
Location
RU
RU
159.89.141.53
10/10
Confidence
47%
Reports
37
Location
US
US
80.67.167.81
8/10
Confidence
47%
Reports
35
Location
FR
FR
205.185.121.77
8/10
Confidence
47%
Reports
33
Location
US
US
209.141.54.4
7/10
Confidence
47%
Reports
27
Location
US
US
43.156.116.171
10/10
Confidence
47%
Reports
23
Location
SG
SG
178.176.84.60
10/10
Confidence
47%
Reports
22
Location
RU
RU
63.180.175.164
7/10
Confidence
47%
Reports
16
Location
DE
DE
128.241.229.30
8/10
Confidence
47%
Reports
15
Location
US
US
138.68.65.113
10/10
Confidence
47%
Reports
13
Location
DE
DE
183.83.224.117
7/10
Confidence
47%
Reports
13
Location
IN
IN