AS24940 — Hetzner Online GmbH Threat Intelligence

Network Threat Summary

AS24940 (Hetzner Online GmbH) has 63,562 malicious IP addresses with 855,465 abuse reports across 4 countries. First activity recorded 2022-06-30, most recent activity 2026-08-15.

Threat Profile: The primary attack categories observed from this network are suspicious activity, severe abuse, aggregated threat. This autonomous system is among the most prolific threat sources globally, with an exceptionally high concentration of malicious IP addresses. Affected countries include DE, FI, IR.

Risk Assessment: CRITICAL - This autonomous system is a major source of malicious activity, ranking in the top 1% of threat networks globally. Consider blocking the entire ASN or implementing strict rate limiting.

Top Attack Categories

• Suspicious Activity 208,658 reports
• Severe Abuse 74,714 reports
• Aggregated Threat 20,026 reports
• Malware C2 19,282 reports
• Moderate Threat 19,088 reports

Top Affected Countries

• DE 386,769 reports
• FI 187,607 reports
• IR 22 reports

Most Reported IPs

• 136.243.220.212 606 reports
• 65.108.2.171 603 reports
• 65.108.78.33 589 reports
• 65.108.213.107 524 reports
• 65.108.125.120 511 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS24940 threat data into your security stack with our REST API.

See how we classify and verify threats →