High Risk
IP 2001:9b2:51fe:4600:a9be:3b22:bdc7:2a45 rated at threat level 7/10 based on 1 security reports.
Pattern analysis reveals concerning activity. Confidence: 26%.
More threatening than 86% of monitored IPs
IP Address
2001:9b2:51fe:4600:a9be:3b22:bdc7:2a45
IPv6
Public
DK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Denmark
Location
Bahnhof AB
ASN 8473
1
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
1
Web App Attack
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
23. October 2026
Last Activity
23. October 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 8473, operated by Bahnhof AB) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
26%
Medium Confidence
Security Reports (1)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 2001:9b2:51fe:4600:a9be:3b22:bdc7:2a45
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
DK
- ASN
- AS8473
- ISP
- Bahnhof AB
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 1
- First Reported
- 26 Oct 2026
- Last Reported
- 23 Oct 2026, 22:02
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8473
Bahnhof AB
SE
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
39
Total IPs Monitored
731
Total Reports
18.7
Reports per IP
Network Context
This IP address belongs to Bahnhof AB (AS8473), which manages 39 IP addresses in our monitoring system. Out of these, 731 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
86
%
Global Threat Ranking
This IP is more threatening than 86% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,322,689 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
1
avg: 7
--
Network Comparison
Compared against 263 IPs in ASN 8473
Threat Level
7/10
network avg: 5.8
+
Total Reports
1
network avg: 5
--
Network Bahnhof AB has overall threat level 6/10
Geographic Comparison
Compared against 523 IPs in DK
Threat Level
7/10
country avg: 6.7
=
Total Reports
1
country avg: 4
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
23 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Friday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
1
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,205,510 threat incidents tracked globally • Last 24h: 34,653 Logs
FEED
Top Threat Sources
-
01
Brazil260,908 21.6% -
02
United States205,980 17.1% -
03
India103,408 8.6% -
04
China50,666 4.2% -
05
Argentina42,382 3.5% -
06
SC29,440 2.4% -
07
Mexico27,886 2.3% -
08
Russia26,938 2.2% -
09
Colombia24,260 2% -
10
Germany24,195 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.6/10
Avg Threat
38%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
195.178.191.5
10/10
Confidence
81%
Reports
253
Location
SE
SE
85.24.223.224
10/10
Confidence
73%
Reports
40
Location
SE
SE
94.254.118.199
10/10
Confidence
72%
Reports
11
Location
SE
SE
94.254.25.158
8/10
Confidence
67%
Reports
9
Location
SE
SE
158.174.210.97
8/10
Confidence
43%
Reports
7
Location
SE
SE
37.123.156.135
10/10
Confidence
41%
Reports
6
Location
SE
SE
109.228.160.190
10/10
Confidence
38%
Reports
11
Location
SE
SE
178.174.146.78
6/10
Confidence
31%
Reports
3
Location
SE
SE
176.10.144.192
6/10
Confidence
30%
Reports
3
Location
SE
SE
217.27.164.107
7/10
Confidence
29%
Reports
2
Location
DK
DK
46.59.24.81
6/10
Confidence
28%
Reports
2
Location
SE
SE
178.174.138.100
7/10
Confidence
28%
Reports
1
Location
SE
SE
155.4.129.186
7/10
Confidence
27%
Reports
1
Location
SE
SE
2001:9b2:51fe:4600:7004:19b1:39e7:e3e9
7/10
Confidence
26%
Reports
1
Location
DK
DK
158.174.210.161
10/10
Confidence
25%
Reports
104
Location
SE
SE
46.59.94.8
5/10
Confidence
25%
Reports
2
Location
SE
SE
178.174.136.134
5/10
Confidence
25%
Reports
2
Location
SE
SE
79.136.14.111
5/10
Confidence
25%
Reports
2
Location
SE
SE
85.24.163.111
5/10
Confidence
25%
Reports
2
Location
SE
SE
155.4.244.169
10/10
Confidence
24%
Reports
130
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
58%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.129.61.10
8/10
Confidence
81%
Reports
19
ISP
Forening for Do...
185.129.61.5
7/10
Confidence
79%
Reports
14
ISP
Forening for Do...
185.129.61.3
10/10
Confidence
79%
Reports
12
ISP
Forening for Do...
185.129.62.62
8/10
Confidence
62%
Reports
10
ISP
Zencurity ApS
176.22.218.223
10/10
Confidence
62%
Reports
5
ISP
TDC Holding A/S
185.129.62.64
8/10
Confidence
60%
Reports
18
ISP
Zencurity ApS
185.129.61.4
8/10
Confidence
55%
Reports
9
ISP
Forening for Do...
158.173.46.144
10/10
Confidence
54%
Reports
8
ISP
Datacamp Limited
2.58.46.13
10/10
Confidence
54%
Reports
7
ISP
M247 Europe SRL
90.184.10.74
8/10
Confidence
52%
Reports
7
ISP
Hiper A/S
185.129.61.6
8/10
Confidence
51%
Reports
9
ISP
Forening for Do...
193.181.211.123
7/10
Confidence
48%
Reports
3
ISP
Webdock.io ApS
188.126.94.230
10/10
Confidence
47%
Reports
4
ISP
Glesys AB
2a06:f245:ffff:2638:4887:93f6:f8d4:33b6
10/10
Confidence
47%
Reports
4
ISP
Ka-net
185.129.61.1
8/10
Confidence
42%
Reports
5
ISP
Forening for Do...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
26%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.107.177.17
10/10
Confidence
26%
Reports
3
Location
US
US
45.138.12.64
10/10
Confidence
26%
Reports
3
Location
LT
LT
135.136.23.221
10/10
Confidence
26%
Reports
3
Location
GB
GB
35.233.154.200
10/10
Confidence
26%
Reports
3
Location
US
US
103.46.142.20
10/10
Confidence
26%
Reports
3
Location
PK
PK
209.61.59.7
10/10
Confidence
26%
Reports
3
Location
CO
CO
185.230.31.0
10/10
Confidence
26%
Reports
5
Location
PL
PL
141.101.76.42
10/10
Confidence
26%
Reports
3
Location
NL
NL
36.80.182.167
10/10
Confidence
26%
Reports
3
Location
ID
ID
202.133.76.50
10/10
Confidence
26%
Reports
3
Location
MN
MN
197.35.244.190
10/10
Confidence
26%
Reports
4
Location
EG
EG
196.151.43.6
10/10
Confidence
26%
Reports
3
Location
EG
EG
122.129.67.188
10/10
Confidence
26%
Reports
3
Location
PK
PK
78.131.69.219
10/10
Confidence
26%
Reports
3
Location
HU
HU
103.11.62.72
10/10
Confidence
26%
Reports
4
Location
PK
PK