Significant Threat
IP 185.254.75.49 identified as significant threat (7/10) from 1 events.
Multiple malicious indicators detected. Confidence level: 30%.
More threatening than 62% of monitored IPs
IP Address
185.254.75.49
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
Germany
Location
Owl Limited
ASN 43357
1
Reports
Honeypot
Data Source
Threat Categories
Hacking
1
SSH
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
22. May 2026
Last Activity
22. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 43357) with generally good reputation. The ISP Owl Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
4/10
Low
Confidence Score
26%
Medium Confidence
Security Reports (1)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 185.254.75.49
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
DE
- ASN
- AS43357
- ISP
- Owl Limited
DNS Information
- Reverse DNS
- 185.254.75.49.dus.mullvad.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 1
- First Reported
- 22 May 2026
- Last Reported
- 22 May 2026, 06:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS43357
Owl Limited
DE
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
20
Total IPs Monitored
164
Total Reports
8.2
Reports per IP
Network Context
This IP address belongs to Owl Limited (AS43357), which manages 20 IP addresses in our monitoring system. Out of these, 164 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
62
%
Global Threat Ranking
This IP is more threatening than 62% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,928 reported IPs worldwide
Threat Level
7/10
avg: 5.3
+
Total Reports
1
avg: 23
--
Network Comparison
Compared against 30 IPs in ASN 43357
Threat Level
7/10
network avg: 4.9
+
Total Reports
1
network avg: 5
--
Network Owl Limited has overall threat level 2/10
Geographic Comparison
Compared against 7,147 IPs in DE
Threat Level
7/10
country avg: 5.8
+
Total Reports
1
country avg: 61
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 May 2026
1 reports
Daily Average
0
reports/day
Most Active
Friday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
1
SSH
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5% -
02
India29,222 15.6% -
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8%
-
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
5.7/10
Avg Threat
46%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
185.254.75.45
8/10
Confidence
76%
Reports
47
Location
DE
DE
194.36.25.10
10/10
Confidence
74%
Reports
12
Location
DE
DE
2a03:d9c0:3000::a20e
8/10
Confidence
69%
Reports
12
Location
DE
DE
185.254.75.32
8/10
Confidence
67%
Reports
14
Location
DE
DE
194.127.167.70
10/10
Confidence
67%
Reports
12
Location
EE
EE
194.36.25.40
10/10
Confidence
64%
Reports
10
Location
DE
DE
185.254.75.42
0/10
Confidence
51%
Reports
3
Location
DE
DE
185.254.75.24
8/10
Confidence
50%
Reports
8
Location
DE
DE
185.248.85.39
10/10
Confidence
45%
Reports
5
Location
GB
GB
194.127.167.80
0/10
Confidence
40%
Reports
2
Location
EE
EE
194.36.25.13
7/10
Confidence
40%
Reports
2
Location
DE
DE
194.127.167.120
0/10
Confidence
30%
Reports
1
Location
EE
EE
194.127.167.122
0/10
Confidence
30%
Reports
1
Location
EE
EE
92.60.40.225
0/10
Confidence
30%
Reports
1
Location
NL
NL
185.248.85.58
7/10
Confidence
30%
Reports
1
Location
GB
GB
185.248.85.15
7/10
Confidence
30%
Reports
1
Location
GB
GB
185.254.75.30
7/10
Confidence
30%
Reports
1
Location
DE
DE
194.36.25.44
7/10
Confidence
30%
Reports
1
Location
DE
DE
194.127.167.102
0/10
Confidence
30%
Reports
1
Location
EE
EE
103.136.147.175
7/10
Confidence
29%
Reports
2
Location
AU
AU
IPs from the same subnet range, likely same network segment.
8
Related IPs
4.8/10
Avg Threat
44%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
185.254.75.45
8/10
Confidence
76%
Reports
47
Location
DE
DE
185.254.75.32
8/10
Confidence
67%
Reports
14
Location
DE
DE
185.254.75.42
0/10
Confidence
51%
Reports
3
Location
DE
DE
185.254.75.24
8/10
Confidence
50%
Reports
8
Location
DE
DE
185.254.75.30
7/10
Confidence
30%
Reports
1
Location
DE
DE
185.254.75.36
0/10
Confidence
29%
Reports
1
Location
DE
DE
185.254.75.43
0/10
Confidence
27%
Reports
1
Location
DE
DE
185.254.75.52
7/10
Confidence
23%
Reports
1
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
46.224.234.158
8/10
Confidence
100%
Reports
131
ISP
Hetzner Online ...
5.83.135.249
8/10
Confidence
100%
Reports
116
ISP
active 1 GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
118.193.59.142
7/10
Confidence
100%
Reports
89
ISP
UCLOUD INFORMAT...
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
5.83.135.102
8/10
Confidence
100%
Reports
44
ISP
AltunHOST LTD
94.26.106.209
8/10
Confidence
100%
Reports
38
ISP
dataforest GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
7.1/10
Avg Threat
30%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
124.110.158.227
7/10
Confidence
30%
Reports
93
Location
JP
JP
62.138.6.15
8/10
Confidence
30%
Reports
76
Location
FR
FR
172.239.239.114
7/10
Confidence
30%
Reports
70
Location
NL
NL
103.216.112.204
7/10
Confidence
30%
Reports
70
Location
VN
VN
2a09:bac5:49f:18d2::279:8d
7/10
Confidence
30%
Reports
54
Location
BD
BD
197.214.64.202
7/10
Confidence
30%
Reports
46
Location
GQ
GQ
180.243.40.27
7/10
Confidence
30%
Reports
45
Location
ID
ID
116.235.246.29
7/10
Confidence
30%
Reports
44
Location
CN
CN
196.1.250.242
7/10
Confidence
30%
Reports
44
Location
SD
SD
117.4.133.29
7/10
Confidence
30%
Reports
44
Location
VN
VN
143.110.140.191
7/10
Confidence
30%
Reports
39
Location
US
US
147.182.134.71
7/10
Confidence
30%
Reports
39
Location
US
US
109.125.168.62
7/10
Confidence
30%
Reports
35
Location
IR
IR
159.223.163.159
7/10
Confidence
30%
Reports
33
Location
US
US
123.249.123.215
7/10
Confidence
30%
Reports
33
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203