Notable Threat
IP 185.208.206.28 rated 8/10 from 16 verified reports.
Multiple security incidents attributed to this IP. Confidence: 94%.
More threatening than 93% of monitored IPs
IP Address
185.208.206.28
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
France
Location
Contabo GmbH
ASN 51167
16
Reports
Honeypot
Data Source
Threat Categories
Hacking
13
Exploited Host
3
Indiscriminate Scan
3
Brute-Force
1
SSH
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
9. November 2026
Last Activity
12. November 2026
Recent (7 days)
16 incidents
Reputable Network
This IP is hosted on a network (ASN 51167) with generally good reputation. The ISP Contabo GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
9. Nov 2026 - 12. Nov 2026
94%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host | Honeypot | 75% |
| New | Indiscriminate Scan | Honeypot | 75% |
| New | Indiscriminate Scan | Honeypot | 75% |
| New | Exploited Host Hacking | Honeypot x2 | 75% |
| New | Hacking Indiscriminate Scan | Honeypot x2 | 75% |
| New | Exploited Host SSH Brute-Force +1 | Honeypot x3 | 75% |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.208.206.28
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
FR
- ASN
- AS51167
- ISP
- Contabo GmbH
DNS Information
- Reverse DNS
- vmi3341612.contaboserver.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 16
- First Reported
- 9 Nov 2026
- Last Reported
- 12 Nov 2026, 23:18
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS51167
Contabo GmbH
FR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
778
Total IPs Monitored
28,942
Total Reports
37.2
Reports per IP
Network Context
This IP address belongs to Contabo GmbH (AS51167), which manages 778 IP addresses in our monitoring system. Out of these, 28,942 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,346,707 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
16
avg: 7
++
Network Comparison
Compared against 3,058 IPs in ASN 51167
Threat Level
8/10
network avg: 7.3
=
Total Reports
16
network avg: 17
=
Network Contabo GmbH has overall threat level 2/10
Geographic Comparison
Compared against 19,041 IPs in FR
Threat Level
8/10
country avg: 6.5
+
Total Reports
16
country avg: 18
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Nov 2026
9 reports
Daily Average
0.5
reports/day
Most Active
Monday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
13
Exploited Host
3
Indiscriminate Scan
3
SSH
1
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,227,591 threat incidents tracked globally • Last 24h: 21,204 Logs
FEED
Top Threat Sources
-
01
Brazil261,554 21.3% -
02
United States212,313 17.3% -
03
India103,945 8.5% -
04
China52,193 4.3% -
05
Argentina42,545 3.5% -
06
SC29,476 2.4% -
07
Mexico28,079 2.3% -
08
Russia27,328 2.2% -
09
Germany25,452 2.1% -
10
Colombia24,326 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
207.180.239.185
8/10
Confidence
96%
Reports
94
Location
FR
FR
161.97.133.50
8/10
Confidence
96%
Reports
55
Location
FR
FR
161.97.134.31
8/10
Confidence
96%
Reports
55
Location
FR
FR
77.237.233.136
10/10
Confidence
94%
Reports
80
Location
FR
FR
37.60.253.219
10/10
Confidence
94%
Reports
80
Location
FR
FR
167.86.76.136
10/10
Confidence
94%
Reports
80
Location
DE
DE
37.60.253.125
10/10
Confidence
94%
Reports
77
Location
FR
FR
167.86.71.233
10/10
Confidence
94%
Reports
77
Location
DE
DE
157.173.111.223
10/10
Confidence
94%
Reports
66
Location
FR
FR
62.171.128.157
10/10
Confidence
94%
Reports
62
Location
DE
DE
155.133.26.49
10/10
Confidence
94%
Reports
54
Location
FR
FR
144.91.103.172
10/10
Confidence
94%
Reports
38
Location
FR
FR
109.199.127.169
10/10
Confidence
94%
Reports
36
Location
FR
FR
194.163.168.117
10/10
Confidence
94%
Reports
33
Location
FR
FR
31.220.76.230
10/10
Confidence
94%
Reports
29
Location
FR
FR
156.67.24.120
10/10
Confidence
94%
Reports
29
Location
FR
FR
13.140.141.137
10/10
Confidence
94%
Reports
29
Location
FR
FR
169.58.123.254
10/10
Confidence
94%
Reports
28
Location
FR
FR
169.58.170.255
10/10
Confidence
94%
Reports
28
Location
FR
FR
169.58.144.30
10/10
Confidence
94%
Reports
27
Location
FR
FR
IPs from the same subnet range, likely same network segment.
2
Related IPs
10/10
Avg Threat
1%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
141.95.162.162
10/10
Confidence
100%
Reports
37
ISP
OVH SAS
104.28.196.57
8/10
Confidence
100%
Reports
17
ISP
Cloudflare, Inc.
104.28.228.55
8/10
Confidence
100%
Reports
16
ISP
Cloudflare, Inc.
104.28.228.57
8/10
Confidence
100%
Reports
13
ISP
Cloudflare, Inc.
104.28.196.55
8/10
Confidence
99%
Reports
16
ISP
Cloudflare, Inc.
185.177.72.64
8/10
Confidence
98%
Reports
38
ISP
Bucklog SARL
91.231.89.33
8/10
Confidence
96%
Reports
179
ISP
ONYPHE SAS
207.180.239.185
8/10
Confidence
96%
Reports
94
ISP
Contabo GmbH
54.37.75.84
8/10
Confidence
96%
Reports
61
ISP
OVH SAS
161.97.133.50
8/10
Confidence
96%
Reports
55
ISP
Contabo GmbH
161.97.134.31
8/10
Confidence
96%
Reports
55
ISP
Contabo GmbH
45.80.27.169
10/10
Confidence
96%
Reports
41
ISP
Free Pro SAS
163.172.66.206
10/10
Confidence
96%
Reports
39
ISP
Scaleway SAS
92.222.92.185
10/10
Confidence
96%
Reports
25
ISP
OVH SAS
51.195.40.26
10/10
Confidence
95%
Reports
26
ISP
OVH SAS
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
212.114.181.150
10/10
Confidence
94%
Reports
14
Location
DE
DE
156.38.56.160
10/10
Confidence
94%
Reports
14
Location
LY
LY
91.226.227.109
10/10
Confidence
94%
Reports
26
Location
NL
NL
213.250.151.217
10/10
Confidence
94%
Reports
19
Location
TR
TR
83.114.150.118
10/10
Confidence
94%
Reports
19
Location
FR
FR
165.227.196.99
10/10
Confidence
94%
Reports
19
Location
US
US
174.138.46.147
10/10
Confidence
94%
Reports
14
Location
US
US
165.227.194.136
10/10
Confidence
94%
Reports
18
Location
US
US
71.210.13.205
10/10
Confidence
94%
Reports
60
Location
US
US
206.189.237.60
10/10
Confidence
94%
Reports
22
Location
US
US
151.59.132.222
10/10
Confidence
94%
Reports
36
Location
IT
IT
181.49.207.198
10/10
Confidence
94%
Reports
17
Location
CO
CO
2.32.205.184
10/10
Confidence
94%
Reports
18
Location
IT
IT
35.201.177.87
10/10
Confidence
94%
Reports
20
Location
TW
TW
35.201.243.235
10/10
Confidence
94%
Reports
25
Location
TW
TW