Notable Threat
IP 2a0f:ca80:b00b:28d8::5 rated 8/10 from 29 verified reports.
Multiple security incidents attributed to this IP. Confidence: 100%.
More threatening than 91% of monitored IPs
IP Address
2a0f:ca80:b00b:28d8::5
IPv6
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Germany
Location
TechTies Inc.
ASN 197170
29
Reports
Mixed
Data Source
Threat Categories
WP User Enumeration
13
Brute-Force
10
WP Login Brute Force
7
Web App Attack
5
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
13. September 2026
Last Activity
20. September 2026
Recent (7 days)
27 incidents
Reputable Network
This IP is hosted on a network (ASN 197170) with generally good reputation. The ISP TechTies Inc. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
13. Sep 2026 - 20. Sep 2026
100%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP User Enumeration | Community | 75% |
| New | WP User Enumeration | Community | 75% |
| New | WP User Enumeration | Community | 75% |
| New | WP Login Brute Force | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | WP User Enumeration | Community | 75% |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP User Enumeration | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 2a0f:ca80:b00b:28d8::5
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
DE
- ASN
- AS197170
- ISP
- TechTies Inc.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 13 Sep 2026
- Last Reported
- 20 Sep 2026, 18:13
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,449 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
29
avg: 9
++
Network Comparison
Compared against 314 IPs in ASN 197170
Threat Level
8/10
network avg: 8.6
=
Total Reports
29
network avg: 23
+
Geographic Comparison
Compared against 15,807 IPs in DE
Threat Level
8/10
country avg: 6.7
+
Total Reports
29
country avg: 34
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 Sep 2026
8 reports
Daily Average
1
reports/day
Most Active
Saturday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
WP User Enumeration
13
Brute-Force
10
WP Login Brute Force
7
Web App Attack
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
698,119 threat incidents tracked globally • Last 24h: 22,766 Logs
FEED
Top Threat Sources
-
01
United States134,879 19.3% -
02
Brazil109,417 15.7%
-
03
India75,795 10.9%
-
04
China43,111 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,470 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,807 2.3%
-
09
Pakistan15,203 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.92.40.173
8/10
Confidence
100%
Reports
199
Location
BG
BG
2a0f:ca80:b00b:1dc7::5
8/10
Confidence
100%
Reports
93
Location
DE
DE
85.11.167.132
10/10
Confidence
100%
Reports
32
Location
NL
NL
93.152.221.64
8/10
Confidence
100%
Reports
31
Location
DE
DE
85.11.167.175
8/10
Confidence
100%
Reports
20
Location
NL
NL
93.152.221.76
8/10
Confidence
99%
Reports
31
Location
DE
DE
91.92.47.67
8/10
Confidence
99%
Reports
24
Location
NL
NL
2a0f:ca80:b00b:5ade::5
10/10
Confidence
99%
Reports
12
Location
DE
DE
85.11.167.212
10/10
Confidence
98%
Reports
268
Location
NL
NL
91.92.40.236
10/10
Confidence
98%
Reports
19
Location
NL
NL
109.160.32.64
10/10
Confidence
98%
Reports
17
Location
BG
BG
91.92.40.14
10/10
Confidence
98%
Reports
13
Location
NL
NL
91.92.40.239
10/10
Confidence
98%
Reports
12
Location
NL
NL
45.153.34.171
8/10
Confidence
97%
Reports
33
Location
NL
NL
94.26.106.143
8/10
Confidence
97%
Reports
22
Location
DE
DE
2a0f:ca80:b00b:ce63::5
10/10
Confidence
97%
Reports
13
Location
DE
DE
91.92.40.233
10/10
Confidence
96%
Reports
137
Location
NL
NL
91.92.40.10
10/10
Confidence
96%
Reports
76
Location
BG
BG
91.92.40.12
10/10
Confidence
96%
Reports
72
Location
BG
BG
91.92.40.240
10/10
Confidence
96%
Reports
46
Location
BG
BG
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
540
ISP
Feo Prest SRL
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
164.92.161.148
10/10
Confidence
100%
Reports
130
ISP
DigitalOcean, LLC
148.251.47.87
8/10
Confidence
100%
Reports
114
ISP
Hetzner Online ...
94.26.106.216
8/10
Confidence
100%
Reports
109
ISP
dataforest GmbH
89.58.31.106
10/10
Confidence
100%
Reports
106
ISP
netcup GmbH
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
2a0f:ca80:b00b:1dc7::5
8/10
Confidence
100%
Reports
93
ISP
TechTies Inc.
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
217.160.212.27
8/10
Confidence
100%
Reports
76
ISP
IONOS SE
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
83.169.38.142
10/10
Confidence
100%
Reports
63
ISP
Host Europe GmbH
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.137
10/10
Confidence
100%
Reports
1,449
Location
BG
BG
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
213.177.179.195
10/10
Confidence
100%
Reports
701
Location
TW
TW
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
601
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
213.209.159.208
10/10
Confidence
100%
Reports
540
Location
DE
DE
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
45.148.10.204
8/10
Confidence
100%
Reports
509
Location
NL
NL
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
195.178.110.217
10/10
Confidence
100%
Reports
382
Location
BG
BG
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2