High Risk
IP 2a0f:ca80:b00b:1d9b::5 rated at threat level 8/10 based on 12 security reports.
Pattern analysis reveals concerning activity. Confidence: 70%.
More threatening than 89% of monitored IPs
IP Address
2a0f:ca80:b00b:1d9b::5
IPv6
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Germany
Location
TechTies Inc.
ASN 197170
12
Reports
Mixed
Data Source
Threat Categories
Web App Attack
11
Bad Web Bot
8
WP Version Scanning
1
WP Plugin Scanning
1
WP Config Exposure
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
26. September 2026
Last Activity
10. October 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 197170) with generally good reputation. The ISP TechTies Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
70%
High Confidence
Confidence History
26. Sep 2026 - 10. Oct 2026
70%
Current
Stable
Trend
Security Reports (12)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Bad Web Bot Web App Attack | Community | 75% |
| New | Web App Attack | Honeypot | 75% |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% | |
| WP Plugin Scanning WP Version Scanning WP Config Exposure | Community | 75% | |
| Bad Web Bot Web App Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 2a0f:ca80:b00b:1d9b::5
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
DE
- ASN
- AS197170
- ISP
- TechTies Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 12
- First Reported
- 26 Sep 2026
- Last Reported
- 10 Oct 2026, 06:30
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 844,533 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
12
avg: 9
+
Network Comparison
Compared against 434 IPs in ASN 197170
Threat Level
8/10
network avg: 8.4
=
Total Reports
12
network avg: 19
-
Geographic Comparison
Compared against 18,734 IPs in DE
Threat Level
8/10
country avg: 7.3
=
Total Reports
12
country avg: 30
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Sep 2026
2 reports
Daily Average
0.4
reports/day
Most Active
Saturday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
11
Bad Web Bot
8
WP Plugin Scanning
1
WP Version Scanning
1
WP Config Exposure
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
767,684 threat incidents tracked globally • Last 24h: 29,011 Logs
FEED
Top Threat Sources
-
01
United States150,088 19.6% -
02
Brazil112,550 14.7%
-
03
India89,125 11.6%
-
04
China46,440 6%
-
05
SC29,263 3.8%
-
06
Germany18,734 2.4%
-
07
Pakistan18,219 2.4%
-
08
Netherlands18,195 2.4%
-
09
Argentina16,534 2.2%
-
10
Colombia15,279 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.236
8/10
Confidence
100%
Reports
156
Location
NL
NL
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
Location
DE
DE
109.160.32.114
10/10
Confidence
100%
Reports
18
Location
BG
BG
109.160.32.64
10/10
Confidence
100%
Reports
18
Location
BG
BG
109.160.32.160
10/10
Confidence
100%
Reports
15
Location
BG
BG
109.160.32.46
10/10
Confidence
100%
Reports
14
Location
BG
BG
109.160.32.157
10/10
Confidence
99%
Reports
24
Location
BG
BG
94.26.106.214
10/10
Confidence
99%
Reports
12
Location
DE
DE
109.160.32.118
10/10
Confidence
98%
Reports
30
Location
BG
BG
109.160.32.37
10/10
Confidence
98%
Reports
12
Location
BG
BG
109.160.32.111
10/10
Confidence
98%
Reports
12
Location
BG
BG
2a0f:ca80:b00b:eff9::5
8/10
Confidence
97%
Reports
14
Location
DE
DE
109.160.32.156
10/10
Confidence
96%
Reports
17
Location
BG
BG
109.160.32.36
10/10
Confidence
96%
Reports
13
Location
BG
BG
93.152.221.156
8/10
Confidence
96%
Reports
11
Location
DE
DE
45.153.34.39
8/10
Confidence
95%
Reports
44
Location
NL
NL
87.121.84.174
8/10
Confidence
95%
Reports
24
Location
US
US
109.160.32.155
10/10
Confidence
94%
Reports
26
Location
BG
BG
93.152.221.67
10/10
Confidence
94%
Reports
25
Location
DE
DE
45.156.87.247
10/10
Confidence
94%
Reports
12
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
1,099
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
193.24.211.218
10/10
Confidence
100%
Reports
128
ISP
Data Campus Lim...
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:8089::5
8/10
Confidence
100%
Reports
48
ISP
TechTies Inc.
136.92.29.89
8/10
Confidence
100%
Reports
40
ISP
Google LLC
35.234.68.116
10/10
Confidence
100%
Reports
38
ISP
Google LLC
34.159.0.93
8/10
Confidence
100%
Reports
37
ISP
Google LLC
34.185.254.148
8/10
Confidence
100%
Reports
27
ISP
Google LLC
167.172.176.118
10/10
Confidence
100%
Reports
23
ISP
DigitalOcean, LLC
151.243.113.84
8/10
Confidence
100%
Reports
18
ISP
Dedik Services ...
45.140.42.24
10/10
Confidence
100%
Reports
16
ISP
Clouvider Limited
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
50.7.86.141
8/10
Confidence
100%
Reports
14
ISP
FDCservers.net
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
70%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
85.203.23.147
8/10
Confidence
70%
Reports
19
Location
SG
SG
202.47.36.206
8/10
Confidence
70%
Reports
22
Location
PK
PK
117.251.22.119
8/10
Confidence
70%
Reports
31
Location
IN
IN
216.180.246.60
8/10
Confidence
70%
Reports
19
Location
US
US
94.231.206.14
8/10
Confidence
70%
Reports
47
Location
CN
CN
162.216.149.189
10/10
Confidence
70%
Reports
120
Location
US
US
20.150.194.114
8/10
Confidence
70%
Reports
19
Location
US
US
85.203.23.155
8/10
Confidence
70%
Reports
14
Location
SG
SG
45.82.78.103
10/10
Confidence
70%
Reports
4,456
Location
DE
DE
43.163.206.70
10/10
Confidence
70%
Reports
53
Location
JP
JP
103.75.161.6
10/10
Confidence
70%
Reports
21
Location
IN
IN
47.84.118.111
10/10
Confidence
70%
Reports
17
Location
SG
SG
5.39.57.91
8/10
Confidence
70%
Reports
388
Location
FR
FR
173.239.211.37
8/10
Confidence
70%
Reports
20
Location
US
US
47.254.87.150
10/10
Confidence
70%
Reports
15
Location
US
US