IP Address

212.60.125.177

IPv4 Public
DK DK
AS31027
GlobalConnect A/S
9 Reports
This IP is under Observation Suspicious activity detected - monitor closely
8/10 Threat
50% Confidence
9 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
DK
Denmark Location
GlobalConnect A/S ASN 31027
9 Reports
Honeypot Data Source

Substantial Risk

Threat level 8/10 for 212.60.125.177 based on 9 documented incidents.

Consistent suspicious behavior patterns. 50% confidence rating.

More threatening than 89% of monitored IPs

Threat Categories

SSH 9

Technical Details

SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.

Recommended Mitigations

Use key-based authentication, change default ports, implement fail2ban, and disable root login.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 3 days indicates persistent threat actor operations.

First Observed 2. September 2026
Last Activity 5. September 2026
Recent (7 days) 0 incidents

Moderate Network Risk

The network hosting this IP (ASN 31027, operated by GlobalConnect A/S) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.

Consider the network context when assessing this individual IP.

Security Recommendations

Configure firewall rules and intrusion detection alerts.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 0/10 Inactive
Confidence Score 48% Medium Confidence

Confidence History

28. Aug 2026 - 5. Sep 2026
50% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (9)

Date Categories Source Confidence
SSH Honeypot 75%
SSH Honeypot x2 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%
SSH Honeypot 75%

Technical Details

Basic Information

IP Address
212.60.125.177
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class C

Geolocation

Country
DK DK
ASN
AS31027
ISP
GlobalConnect A/S

DNS Information

Reverse DNS
177.125.60.212.andels.net
PTR Record
Yes
Connection Type
Dynamic

Statistics

Total Reports
9
First Reported
28 Aug 2026
Last Reported
5 Sep 2026, 12:22

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS31027
GlobalConnect A/S
DK DK

Network Threat Assessment

4/10
This network has low threat indicators with minimal suspicious activity.

Network Statistics

4
Total IPs Monitored
9
Total Reports
2.3
Reports per IP

Network Context

This IP address belongs to GlobalConnect A/S (AS31027), which manages 4 IP addresses in our monitoring system. Out of these, 9 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.

Network notice: This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.

Comparative Analysis

How this IP compares to others in our threat intelligence database

89 %

Global Threat Ranking

This IP is more threatening than 89% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 809,089 reported IPs worldwide

Threat Level 8/10 avg: 6.3 +
Total Reports 9 avg: 9 =

Network Comparison

Compared against 11 IPs in ASN 31027

Threat Level 8/10 network avg: 6.9 +
Total Reports 9 network avg: 4 ++
Network GlobalConnect A/S has overall threat level 4/10

Geographic Comparison

Compared against 412 IPs in DK

Threat Level 8/10 country avg: 6.8 +
Total Reports 9 country avg: 4 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

735,625 threat incidents tracked globally • Last 24h: 27,746 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    143,788 19.5%
  2. 02
    BR
    Brazil BR
    110,812 15.1%
  3. 03
    IN
    India IN
    82,604 11.2%
  4. 04
    CN
    China CN
    44,873 6.1%
  5. 05
    SC
    SC SC
    29,238 4%
  6. 06
    DE
    Germany DE
    17,565 2.4%
  7. 07
    NL
    Netherlands NL
    17,520 2.4%
  8. 08
    PK
    Pakistan PK
    16,741 2.3%
  9. 09
    AR
    Argentina AR
    16,194 2.2%
  10. 10
    CO
    Colombia CO
    15,139 2.1%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same country with similar threat profiles.

15 Related IPs
8.5/10 Avg Threat
65% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
146.70.197.226 7/10
Confidence 91%
Reports 25
ISP M247 Europe SRL
22 Sep 2026
45.129.56.156 7/10
Confidence 91%
Reports 24
ISP 31173 Services AB
22 Sep 2026
86.52.31.96 8/10
Confidence 74%
Reports 35
ISP Norlys Digital A/S
30 Sep 2026
85.27.241.26 10/10
Confidence 72%
Reports 7
ISP Norlys Telco A/S
1 Oct 2026
185.129.61.10 8/10
Confidence 71%
Reports 12
ISP Forening for Do...
29 Sep 2026
5.103.46.38 8/10
Confidence 65%
Reports 12
ISP FIBIA P/S
8 Sep 2026
185.129.62.63 7/10
Confidence 64%
Reports 16
ISP Zencurity ApS
28 Sep 2026
185.129.61.3 10/10
Confidence 63%
Reports 8
ISP Forening for Do...
29 Sep 2026
80.62.117.111 8/10
Confidence 63%
Reports 5
ISP TDC Holding A/S
17 Sep 2026
185.129.61.5 8/10
Confidence 59%
Reports 7
ISP Forening for Do...
30 Sep 2026
185.109.14.26 10/10
Confidence 59%
Reports 5
ISP BornFiber Servi...
1 Oct 2026
90.184.10.74 10/10
Confidence 58%
Reports 4
ISP Hiper A/S
26 Sep 2026
152.115.152.218 10/10
Confidence 51%
Reports 18
ISP GlobalConnect A/S
5 Sep 2026
185.129.62.62 8/10
Confidence 50%
Reports 7
ISP Zencurity ApS
10 Sep 2026
45.129.56.222 8/10
Confidence 50%
Reports 5
ISP 31173 Services AB
16 Sep 2026

IPs with similar threat level and confidence scores.

15 Related IPs
8.9/10 Avg Threat
50% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
77.83.39.4 7/10
Confidence 50%
Reports 3,416
Location DE DE
12 Sep 2026
185.45.193.187 8/10
Confidence 50%
Reports 848
Location NL NL
30 Aug 2026
45.137.194.93 10/10
Confidence 50%
Reports 720
Location US US
30 Aug 2026
204.76.203.10 10/10
Confidence 50%
Reports 550
Location NL NL
9 Sep 2026
185.176.8.77 8/10
Confidence 50%
Reports 276
Location ES ES
9 Sep 2026
185.231.33.38 8/10
Confidence 50%
Reports 229
Location SC SC
3 Sep 2026
185.243.5.80 8/10
Confidence 50%
Reports 224
Location HK HK
7 Sep 2026
35.205.166.64 10/10
Confidence 50%
Reports 176
Location BE BE
6 Sep 2026
209.42.21.221 10/10
Confidence 50%
Reports 174
Location GB GB
6 Sep 2026
151.243.11.230 10/10
Confidence 50%
Reports 161
Location AE AE
2 Sep 2026
152.32.252.65 10/10
Confidence 50%
Reports 148
Location HK HK
2 Sep 2026
196.196.253.20 10/10
Confidence 50%
Reports 131
Location GB GB
3 Sep 2026
194.163.139.224 8/10
Confidence 50%
Reports 125
Location FR FR
9 Sep 2026
170.64.177.80 7/10
Confidence 50%
Reports 121
Location AU AU
7 Sep 2026
165.232.143.119 10/10
Confidence 50%
Reports 106
Location US US
1 Sep 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "212.60.125.177",
    "threat_level": 8,
    "confidence_score": 50,
    "total_reports": 9,
    "country_code": "DK",
    "isp_name": "GlobalConnect A/S",
    "asn": "31027",
    "first_reported": "2026-08-28 02:49:50",
    "last_reported": "2026-09-05 12:22:12",
    "exported_at": "2026-10-01T14:03:28+02:00",
    "source": "https://reportedip.com/ip/212.60.125.177/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses