IP Address

185.6.235.6

IPv4 Public
LU LU
AS8632
Luxembourg Online S.A.
3 Reports
This IP is under Observation Suspicious activity detected - monitor closely
7/10 Threat
40% Confidence
3 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
LU
Luxembourg Location
Luxembourg Online S.A. ASN 8632
3 Reports
Mixed Data Source

High Risk

IP 185.6.235.6 rated at threat level 7/10 based on 3 security reports.

Pattern analysis reveals concerning activity. Confidence: 40%.

More threatening than 88% of monitored IPs

Threat Categories

Bad Web Bot 2
WP Content Scraping 2
Hacking 1

Technical Details

Bad web bots ignore robots.txt, scrape content aggressively, and may probe for vulnerabilities.

Recommended Mitigations

Implement bot detection, rate limiting, and use services like Cloudflare Bot Management.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 6 days indicates persistent threat actor operations.

First Observed 16. October 2026
Last Activity 22. October 2026
Recent (7 days) 1 incidents

Reputable Network

This IP is hosted on a network (ASN 8632) with generally good reputation. The ISP Luxembourg Online S.A. maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Monitor closely and consider blocking. Escalation potential detected.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 7/10 High
High
Activity Frequency 0/10 Inactive
Confidence Score 40% Medium Confidence

Confidence History

16. Oct 2026 - 22. Oct 2026
40% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (3)

Date Categories Source Confidence
Hacking Community 75%
Bad Web Bot WP Content Scraping Honeypot 75%
Bad Web Bot WP Content Scraping Honeypot 75%

Technical Details

Basic Information

IP Address
185.6.235.6
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class B

Geolocation

Country
LU LU
ASN
AS8632
ISP
Luxembourg Online S.A.

DNS Information

Reverse DNS
cgn07-185-6-235-6.internet.lu
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
3
First Reported
17 Oct 2026
Last Reported
22 Oct 2026, 17:07

Comparative Analysis

How this IP compares to others in our threat intelligence database

88 %

Global Threat Ranking

This IP is more threatening than 88% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 1,274,875 reported IPs worldwide

Threat Level 7/10 avg: 6.0 +
Total Reports 3 avg: 7 --

Network Comparison

Compared against 33 IPs in ASN 8632

Threat Level 7/10 network avg: 5.1 +
Total Reports 3 network avg: 1 ++

Geographic Comparison

Compared against 612 IPs in LU

Threat Level 7/10 country avg: 6.3 =
Total Reports 3 country avg: 9 --
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

1,161,861 threat incidents tracked globally • Last 24h: 31,225 Logs

FEED

Top Threat Sources

  1. 01
    BR
    Brazil BR
    257,930 22.2%
  2. 02
    US
    United States US
    197,283 17%
  3. 03
    IN
    India IN
    100,715 8.7%
  4. 04
    CN
    China CN
    49,105 4.2%
  5. 05
    AR
    Argentina AR
    41,730 3.6%
  6. 06
    SC
    SC SC
    29,380 2.5%
  7. 07
    MX
    Mexico MX
    27,210 2.3%
  8. 08
    RU
    Russia RU
    26,112 2.2%
  9. 09
    CO
    Colombia CO
    23,957 2.1%
  10. 10
    DE
    Germany DE
    22,226 1.9%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same subnet range, likely same network segment.

8 Related IPs
5.1/10 Avg Threat
20% Avg Confidence
185.6.235.15 5/10
Confidence 26%
Reports 2
Location LU LU
16 Oct 2026
185.6.235.146 5/10
Confidence 23%
Reports 1
Location LU LU
16 Oct 2026
185.6.235.29 5/10
Confidence 23%
Reports 1
Location LU LU
18 Oct 2026
185.6.235.142 5/10
Confidence 23%
Reports 1
Location LU LU
19 Oct 2026
185.6.235.132 5/10
Confidence 23%
Reports 1
Location LU LU
15 Oct 2026
185.6.235.14 6/10
Confidence 20%
Reports 1
Location LU LU
22 Oct 2026
185.6.235.149 5/10
Confidence 13%
Reports 1
Location LU LU
29 Aug 2026
185.6.235.134 5/10
Confidence 12%
Reports 1
Location LU LU
27 Aug 2026

IPs from the same country with similar threat profiles.

15 Related IPs
8.7/10 Avg Threat
68% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
107.189.2.172 10/10
Confidence 94%
Reports 17
ISP FranTech Solutions
18 Oct 2026
107.189.30.98 10/10
Confidence 94%
Reports 14
ISP FranTech Solutions
26 Oct 2026
176.65.139.231 8/10
Confidence 91%
Reports 18
ISP Offshore LC
10 Oct 2026
80.90.55.176 10/10
Confidence 86%
Reports 12
ISP Visual Online S.A.
20 Oct 2026
104.244.72.115 8/10
Confidence 77%
Reports 15
ISP PONYNET
24 Oct 2026
176.65.139.44 8/10
Confidence 72%
Reports 55
ISP Offshore LC
26 Oct 2026
176.65.139.131 10/10
Confidence 72%
Reports 28
ISP Offshore LC
22 Oct 2026
176.65.139.151 8/10
Confidence 71%
Reports 32
ISP Offshore LC
22 Oct 2026
107.189.8.181 7/10
Confidence 65%
Reports 14
ISP PONYNET
23 Oct 2026
176.65.139.217 10/10
Confidence 64%
Reports 11
ISP Offshore LC
13 Oct 2026
80.90.55.181 8/10
Confidence 60%
Reports 5
ISP Visual Online S.A.
18 Oct 2026
107.189.8.56 8/10
Confidence 47%
Reports 12
ISP PONYNET
3 Oct 2026
107.189.14.87 10/10
Confidence 44%
Reports 84
ISP FranTech Solutions
25 Oct 2026
107.189.29.12 8/10
Confidence 43%
Reports 18
ISP FranTech Solutions
19 Oct 2026
107.189.28.140 8/10
Confidence 41%
Reports 666
ISP FranTech Solutions
22 Sep 2026

IPs with similar threat level and confidence scores.

15 Related IPs
6/10 Avg Threat
40% Avg Confidence
82.22.239.57 6/10
Confidence 40%
Reports 4
Location AL AL
19 Oct 2026
162.141.20.5 6/10
Confidence 40%
Reports 4
Location US US
19 Oct 2026
31.105.126.207 6/10
Confidence 40%
Reports 4
Location US US
19 Oct 2026
31.105.96.140 6/10
Confidence 40%
Reports 4
Location US US
18 Oct 2026
195.81.138.60 6/10
Confidence 40%
Reports 4
Location FR FR
19 Oct 2026
93.152.81.144 6/10
Confidence 40%
Reports 4
Location US US
19 Oct 2026
31.105.107.177 6/10
Confidence 40%
Reports 4
Location US US
19 Oct 2026
152.232.184.113 6/10
Confidence 40%
Reports 4
Location US US
17 Oct 2026
152.232.247.23 6/10
Confidence 40%
Reports 4
Location US US
18 Oct 2026
45.38.91.198 6/10
Confidence 40%
Reports 4
Location US US
19 Oct 2026
45.128.22.107 6/10
Confidence 40%
Reports 4
Location US US
18 Oct 2026
195.81.181.153 6/10
Confidence 40%
Reports 4
Location IT IT
18 Oct 2026
64.144.192.147 6/10
Confidence 40%
Reports 4
Location US US
16 Oct 2026
217.204.65.189 6/10
Confidence 40%
Reports 4
Location GB GB
18 Oct 2026
68.167.73.128 6/10
Confidence 40%
Reports 4
Location US US
17 Oct 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "185.6.235.6",
    "threat_level": 7,
    "confidence_score": 40,
    "total_reports": 3,
    "country_code": "LU",
    "isp_name": "Luxembourg Online S.A.",
    "asn": "8632",
    "first_reported": "2026-10-17 21:50:10",
    "last_reported": "2026-10-22 17:07:38",
    "exported_at": "2026-10-27T05:10:54+01:00",
    "source": "https://reportedip.com/ip/185.6.235.6/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses