Notable Threat
IP 213.61.209.242 rated 8/10 from 10 verified reports.
Multiple security incidents attributed to this IP. Confidence: 84%.
More threatening than 90% of monitored IPs
IP Address
213.61.209.242
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
COLT Technology Services ...
ASN 8220
10
Reports
Mixed
Data Source
Threat Categories
SSH
10
Brute-Force
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 5 days indicates persistent threat actor operations.
First Observed
25. September 2026
Last Activity
30. September 2026
Recent (7 days)
4 incidents
Moderate Network Risk
The network hosting this IP (ASN 8220, operated by COLT Technology Services Group Limited) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
84%
Verified
Confidence History
25. Sep 2026 - 30. Sep 2026
84%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 213.61.209.242
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
DE
- ASN
- AS8220
- ISP
- COLT Technology Services Group Limited
DNS Information
- Reverse DNS
- port-213-61-209-242.ham.dial.de.colt.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 10
- First Reported
- 25 Sep 2026
- Last Reported
- 30 Sep 2026, 03:41
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS8220
COLT Technology Services Group Limited
SG
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
4
Total IPs Monitored
405
Total Reports
101.3
Reports per IP
Network Context
This IP address belongs to COLT Technology Services Group Limited (AS8220), which manages 4 IP addresses in our monitoring system. Out of these, 405 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 819,257 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
10
avg: 9
=
Network Comparison
Compared against 22 IPs in ASN 8220
Threat Level
8/10
network avg: 7.1
=
Total Reports
10
network avg: 14
-
Network COLT Technology Services Group Limited has overall threat level 5/10
Geographic Comparison
Compared against 17,898 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
10
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
25 Sep 2026
5 reports
Daily Average
0.3
reports/day
Most Active
Friday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
10
Brute-Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
744,755 threat incidents tracked globally • Last 24h: 27,952 Logs
FEED
Top Threat Sources
-
01
United States145,756 19.6% -
02
Brazil111,311 14.9%
-
03
India84,371 11.3%
-
04
China45,466 6.1%
-
05
SC29,246 3.9%
-
06
Germany17,898 2.4%
-
07
Netherlands17,669 2.4%
-
08
Pakistan17,209 2.3%
-
09
Argentina16,230 2.2%
-
10
Colombia15,155 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7/10
Avg Threat
26%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
87.241.44.37
10/10
Confidence
96%
Reports
204
Location
IT
IT
136.225.39.132
10/10
Confidence
94%
Reports
14
Location
IT
IT
213.215.180.4
10/10
Confidence
41%
Reports
7
Location
IT
IT
212.36.35.110
7/10
Confidence
32%
Reports
5
Location
GB
GB
212.36.35.106
7/10
Confidence
32%
Reports
4
Location
GB
GB
213.215.209.101
10/10
Confidence
31%
Reports
6
Location
IT
IT
62.96.11.251
7/10
Confidence
31%
Reports
2
Location
DE
DE
217.110.226.158
6/10
Confidence
23%
Reports
1
Location
DE
DE
213.61.126.98
6/10
Confidence
23%
Reports
1
Location
DE
DE
90.152.55.229
0/10
Confidence
22%
Reports
1
Location
GB
GB
213.61.29.157
5/10
Confidence
21%
Reports
1
Location
DE
DE
62.96.175.57
7/10
Confidence
18%
Reports
14
Location
DE
DE
87.241.41.107
5/10
Confidence
13%
Reports
1
Location
IT
IT
213.86.32.194
5/10
Confidence
12%
Reports
1
Location
BE
BE
57.133.85.233
7/10
Confidence
10%
Reports
2
Location
DE
DE
193.82.54.28
10/10
Confidence
9%
Reports
19
Location
SG
SG
213.61.218.57
5/10
Confidence
5%
Reports
1
Location
DE
DE
213.61.152.10
7/10
Confidence
4%
Reports
1
Location
DE
DE
80.169.125.12
8/10
Confidence
3%
Reports
3
Location
GB
GB
80.251.179.29
7/10
Confidence
3%
Reports
1
Location
ES
ES
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
915
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
116
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
45
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
27
ISP
netcup GmbH
151.243.113.84
8/10
Confidence
100%
Reports
15
ISP
Dedik Services ...
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
45.140.42.24
10/10
Confidence
100%
Reports
13
ISP
Clouvider Limited
213.209.159.42
8/10
Confidence
100%
Reports
13
ISP
Feo Prest SRL
5.175.206.193
8/10
Confidence
99%
Reports
20
ISP
AltunHOST LTD
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
2a0f:ca80:b00b:28d8::5
8/10
Confidence
98%
Reports
38
ISP
TechTies Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.129.187.38
8/10
Confidence
84%
Reports
4,473
Location
US
US
3.130.168.2
8/10
Confidence
84%
Reports
3,927
Location
US
US
4.145.113.4
10/10
Confidence
84%
Reports
2,649
Location
SG
SG
181.214.48.144
10/10
Confidence
84%
Reports
1,433
Location
BR
BR
167.94.146.51
8/10
Confidence
84%
Reports
1,081
Location
US
US
213.209.159.236
10/10
Confidence
84%
Reports
1,045
Location
TW
TW
92.118.39.71
10/10
Confidence
84%
Reports
624
Location
US
US
160.119.76.24
10/10
Confidence
84%
Reports
380
Location
SC
SC
195.184.76.124
8/10
Confidence
84%
Reports
288
Location
US
US
195.184.76.102
8/10
Confidence
84%
Reports
283
Location
US
US
66.132.172.182
8/10
Confidence
84%
Reports
282
Location
US
US
195.184.76.100
10/10
Confidence
84%
Reports
280
Location
US
US
66.132.172.142
8/10
Confidence
84%
Reports
275
Location
US
US
91.230.168.43
10/10
Confidence
84%
Reports
270
Location
US
US
91.230.168.62
10/10
Confidence
84%
Reports
270
Location
US
US