High Risk
IP 2a01:367:d3d1:8563:296:17ff:fed1:98b rated at threat level 7/10 based on 9 security reports.
Pattern analysis reveals concerning activity. Confidence: 42%.
More threatening than 84% of monitored IPs
IP Address
2a01:367:d3d1:8563:296:17ff:fed1:98b
IPv6
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
aurologic GmbH
ASN 30823
9
Reports
Community
Data Source
Threat Categories
Web App Attack
8
Bad Web Bot
5
Hacking
3
WP Version Scanning
1
WP Plugin Scanning
1
WP Config Exposure
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
18. September 2026
Last Activity
30. September 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 30823) with generally good reputation. The ISP aurologic GmbH maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
6/10
Moderate
Confidence Score
42%
Medium Confidence
Confidence History
18. Sep 2026 - 30. Sep 2026
42%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | Bad Web Bot Web App Attack | Community | 75% |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Web App Attack Hacking | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Web App Attack Hacking | Community | 75% | |
| Web App Attack Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 2a01:367:d3d1:8563:296:17ff:fed1:98b
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
DE
- ASN
- AS30823
- ISP
- aurologic GmbH
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 9
- First Reported
- 18 Sep 2026
- Last Reported
- 30 Sep 2026, 22:53
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS30823
aurologic GmbH
DE
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
15
Total IPs Monitored
15,627
Total Reports
1041.8
Reports per IP
Network Context
This IP address belongs to aurologic GmbH (AS30823), which manages 15 IP addresses in our monitoring system. Out of these, 15,627 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 806,228 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
9
avg: 9
=
Network Comparison
Compared against 33 IPs in ASN 30823
Threat Level
7/10
network avg: 7.8
=
Total Reports
9
network avg: 487
--
Network aurologic GmbH has overall threat level 3/10
Geographic Comparison
Compared against 17,474 IPs in DE
Threat Level
7/10
country avg: 7.3
=
Total Reports
9
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Sep 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Wednesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
8
Bad Web Bot
5
Hacking
3
WP Plugin Scanning
1
WP Version Scanning
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
733,186 threat incidents tracked globally • Last 24h: 28,963 Logs
FEED
Top Threat Sources
-
01
United States143,190 19.5% -
02
Brazil110,727 15.1%
-
03
India82,109 11.2%
-
04
China44,727 6.1%
-
05
SC29,233 4%
-
06
Germany17,474 2.4%
-
07
Netherlands17,459 2.4%
-
08
Pakistan16,628 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.6/10
Avg Threat
23%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
2a01:367:d3d1:8563:21d:a6ff:fe49:142f
10/10
Confidence
91%
Reports
10
Location
DE
DE
2602:fa59:8:337::1
10/10
Confidence
82%
Reports
20
Location
DE
DE
144.172.68.56
7/10
Confidence
68%
Reports
216
Location
US
US
45.11.18.33
10/10
Confidence
48%
Reports
6
Location
DE
DE
172.86.94.82
7/10
Confidence
37%
Reports
186
Location
DE
DE
144.172.68.124
7/10
Confidence
19%
Reports
1
Location
DE
DE
41.216.188.149
7/10
Confidence
19%
Reports
1
Location
DE
DE
172.86.92.151
6/10
Confidence
18%
Reports
1
Location
DE
DE
45.91.250.107
7/10
Confidence
14%
Reports
5
Location
DE
DE
41.216.188.32
7/10
Confidence
13%
Reports
1
Location
DE
DE
41.216.188.198
7/10
Confidence
12%
Reports
1
Location
DE
DE
2a01:367:cff2:3391:1793:1ab5:7707:4c1e
7/10
Confidence
10%
Reports
1
Location
DE
DE
152.89.246.213
10/10
Confidence
9%
Reports
3
Location
DE
DE
41.216.188.21
7/10
Confidence
6%
Reports
2
Location
DE
DE
2a01:367:d3d1:8563:2f2:f4ff:feca:5cfa
6/10
Confidence
5%
Reports
2
Location
DE
DE
2a01:367:d3d1:8563:206:1ff:fe0c:df57
7/10
Confidence
3%
Reports
1
Location
DE
DE
172.86.93.168
7/10
Confidence
2%
Reports
20
Location
DE
DE
45.153.243.249
7/10
Confidence
2%
Reports
1
Location
DE
DE
45.11.16.143
7/10
Confidence
2%
Reports
1
Location
DE
DE
216.126.229.118
8/10
Confidence
1%
Reports
48
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
803
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
38
ISP
TechTies Inc.
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
26
ISP
netcup GmbH
5.175.206.193
8/10
Confidence
100%
Reports
19
ISP
AltunHOST LTD
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
138.201.205.59
8/10
Confidence
99%
Reports
17
ISP
Hetzner Online ...
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
94.26.106.214
10/10
Confidence
99%
Reports
11
ISP
TechTies Inc.
136.92.13.138
10/10
Confidence
99%
Reports
10
ISP
Google LLC
2a01:239:265:2100::1
8/10
Confidence
98%
Reports
30
ISP
IONOS SE
194.25.171.99
10/10
Confidence
98%
Reports
20
ISP
Deutsche Teleko...
136.92.29.89
8/10
Confidence
98%
Reports
19
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
42%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
5.39.101.60
8/10
Confidence
42%
Reports
1,529
Location
FR
FR
213.209.159.11
10/10
Confidence
42%
Reports
970
Location
DE
DE
213.209.159.238
10/10
Confidence
42%
Reports
963
Location
TW
TW
24.247.114.174
10/10
Confidence
42%
Reports
601
Location
US
US
85.217.140.2
10/10
Confidence
42%
Reports
546
Location
FR
FR
136.53.37.93
10/10
Confidence
42%
Reports
275
Location
US
US
24.98.9.141
10/10
Confidence
42%
Reports
271
Location
US
US
104.35.240.68
10/10
Confidence
42%
Reports
270
Location
US
US
195.182.16.52
10/10
Confidence
42%
Reports
184
Location
DE
DE
91.185.48.163
10/10
Confidence
42%
Reports
151
Location
RU
RU
151.240.54.76
8/10
Confidence
42%
Reports
143
Location
US
US
185.201.226.108
8/10
Confidence
42%
Reports
126
Location
US
US
119.246.15.94
10/10
Confidence
42%
Reports
106
Location
HK
HK
4.206.92.183
10/10
Confidence
42%
Reports
98
Location
CA
CA
37.187.244.59
10/10
Confidence
42%
Reports
95
Location
FR
FR