Significant Threat
IP 2a0f:ca80:b00b:1dc7::5 identified as significant threat (8/10) from 93 events.
Multiple malicious indicators detected. Confidence level: 100%.
More threatening than 91% of monitored IPs
IP Address
2a0f:ca80:b00b:1dc7::5
IPv6
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
TechTies Inc.
ASN 197170
93
Reports
Mixed
Data Source
Threat Categories
Brute-Force
16
WP User Enumeration
9
WP Login Brute Force
6
Web App Attack
5
Hacking
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
26. August 2026
Last Activity
18. September 2026
Recent (7 days)
18 incidents
Reputable Network
This IP is hosted on a network (ASN 197170) with generally good reputation. The ISP TechTies Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
9. Sep 2026 - 18. Sep 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Hacking Brute-Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 2a0f:ca80:b00b:1dc7::5
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
DE
- ASN
- AS197170
- ISP
- TechTies Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 93
- First Reported
- 26 Aug 2026
- Last Reported
- 18 Sep 2026, 09:01
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,098 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
93
avg: 9
++
Network Comparison
Compared against 313 IPs in ASN 197170
Threat Level
8/10
network avg: 8.6
=
Total Reports
93
network avg: 23
++
Geographic Comparison
Compared against 15,801 IPs in DE
Threat Level
8/10
country avg: 6.7
+
Total Reports
93
country avg: 34
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Sep 2026
16 reports
Daily Average
3.1
reports/day
Most Active
Tuesday
18 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
37
WP User Enumeration
37
WP Login Brute Force
24
Web App Attack
15
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
697,768 threat incidents tracked globally • Last 24h: 22,495 Logs
FEED
Top Threat Sources
-
01
United States134,745 19.3% -
02
Brazil109,407 15.7%
-
03
India75,759 10.9%
-
04
China43,092 6.2%
-
05
SC29,183 4.2%
-
06
Netherlands16,462 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,800 2.3%
-
09
Pakistan15,189 2.2%
-
10
Colombia15,075 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.173
8/10
Confidence
100%
Reports
199
Location
BG
BG
85.11.167.132
10/10
Confidence
100%
Reports
32
Location
NL
NL
93.152.221.64
8/10
Confidence
100%
Reports
31
Location
DE
DE
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
28
Location
DE
DE
85.11.167.175
8/10
Confidence
100%
Reports
20
Location
NL
NL
93.152.221.76
8/10
Confidence
99%
Reports
31
Location
DE
DE
91.92.47.67
8/10
Confidence
99%
Reports
24
Location
NL
NL
2a0f:ca80:b00b:5ade::5
10/10
Confidence
99%
Reports
12
Location
DE
DE
85.11.167.212
10/10
Confidence
98%
Reports
268
Location
NL
NL
91.92.40.236
10/10
Confidence
98%
Reports
17
Location
NL
NL
109.160.32.64
10/10
Confidence
98%
Reports
17
Location
BG
BG
91.92.40.14
10/10
Confidence
98%
Reports
13
Location
NL
NL
91.92.40.239
10/10
Confidence
98%
Reports
12
Location
NL
NL
45.153.34.171
8/10
Confidence
97%
Reports
33
Location
NL
NL
94.26.106.143
8/10
Confidence
97%
Reports
22
Location
DE
DE
2a0f:ca80:b00b:ce63::5
10/10
Confidence
97%
Reports
13
Location
DE
DE
91.92.40.233
10/10
Confidence
96%
Reports
137
Location
NL
NL
91.92.40.10
10/10
Confidence
96%
Reports
76
Location
BG
BG
91.92.40.12
10/10
Confidence
96%
Reports
72
Location
BG
BG
91.92.40.240
10/10
Confidence
96%
Reports
46
Location
BG
BG
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
537
ISP
Feo Prest SRL
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
164.92.161.148
10/10
Confidence
100%
Reports
130
ISP
DigitalOcean, LLC
148.251.47.87
8/10
Confidence
100%
Reports
114
ISP
Hetzner Online ...
94.26.106.216
8/10
Confidence
100%
Reports
109
ISP
dataforest GmbH
89.58.31.106
10/10
Confidence
100%
Reports
106
ISP
netcup GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
217.160.212.27
8/10
Confidence
100%
Reports
76
ISP
IONOS SE
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
83.169.38.142
10/10
Confidence
100%
Reports
63
ISP
Host Europe GmbH
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
134.122.93.100
10/10
Confidence
100%
Reports
61
ISP
DigitalOcean, LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.137
10/10
Confidence
100%
Reports
1,449
Location
BG
BG
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
213.177.179.195
10/10
Confidence
100%
Reports
701
Location
TW
TW
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
601
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
213.209.159.208
10/10
Confidence
100%
Reports
537
Location
DE
DE
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
45.148.10.204
8/10
Confidence
100%
Reports
509
Location
NL
NL
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
195.178.110.217
10/10
Confidence
100%
Reports
382
Location
BG
BG
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2