Notable Threat
IP 2a11:6100:0:1f58:: rated 7/10 from 61 verified reports.
Multiple security incidents attributed to this IP. Confidence: 70%.
More threatening than 84% of monitored IPs
IP Address
2a11:6100:0:1f58::
IPv6
Public
PL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Poland
Location
SOLLUTIUM EU Sp z.o.o.
ASN 43641
61
Reports
Community
Data Source
Threat Categories
Hacking
19
WP REST API Abuse
12
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
21. September 2026
Last Activity
7. October 2026
Recent (7 days)
29 incidents
Reputable Network
This IP is hosted on a network (ASN 43641) with generally good reputation. The ISP SOLLUTIUM EU Sp z.o.o. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Immediate monitoring recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
8/10
High
Confidence Score
70%
High Confidence
Confidence History
1. Oct 2026 - 7. Oct 2026
70%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Community | 75% |
| New | WP REST API Abuse | Community | 75% |
| Hacking | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| Hacking | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| WP REST API Abuse Hacking | Community x2 | 75% | |
| Hacking | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| Hacking | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community x2 | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% | |
| WP REST API Abuse | Community | 75% | |
| Hacking | Community | 75% | |
| Hacking | Community | 75% |
Technical Details
Basic Information
- IP Address
- 2a11:6100:0:1f58::
- IP Version
- IPv6
- Network Type
- Public
- Tor Network
- No
Geolocation
- Country
-
PL
- ASN
- AS43641
- ISP
- SOLLUTIUM EU Sp z.o.o.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 61
- First Reported
- 21 Sep 2026
- Last Reported
- 7 Oct 2026, 19:30
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS43641
SOLLUTIUM EU Sp z.o.o.
NL
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
9
Total IPs Monitored
72
Total Reports
8
Reports per IP
Network Context
This IP address belongs to SOLLUTIUM EU Sp z.o.o. (AS43641), which manages 9 IP addresses in our monitoring system. Out of these, 72 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 833,363 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
61
avg: 9
++
Network Comparison
Compared against 53 IPs in ASN 43641
Threat Level
7/10
network avg: 6.9
=
Total Reports
61
network avg: 8
++
Network SOLLUTIUM EU Sp z.o.o. has overall threat level 3/10
Geographic Comparison
Compared against 5,632 IPs in PL
Threat Level
7/10
country avg: 5.9
+
Total Reports
61
country avg: 7
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Oct 2026
10 reports
Daily Average
2
reports/day
Most Active
Tuesday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
43
WP REST API Abuse
18
WP Plugin Scanning
1
WP Version Scanning
1
WP Config Exposure
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
757,605 threat incidents tracked globally • Last 24h: 30,902 Logs
FEED
Top Threat Sources
-
01
United States148,298 19.6% -
02
Brazil111,887 14.8%
-
03
India87,212 11.5%
-
04
China46,096 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,448 2.4%
-
07
Netherlands18,003 2.4%
-
08
Pakistan17,825 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.6/10
Avg Threat
32%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
213.111.144.104
8/10
Confidence
72%
Reports
32
Location
NL
NL
91.202.4.216
10/10
Confidence
54%
Reports
14
Location
NL
NL
138.226.240.158
8/10
Confidence
53%
Reports
15
Location
NL
NL
2a11:6100:0:1831::
8/10
Confidence
48%
Reports
14
Location
PL
PL
85.137.52.115
8/10
Confidence
40%
Reports
8
Location
NL
NL
85.137.54.178
10/10
Confidence
36%
Reports
3
Location
NL
NL
138.226.250.28
7/10
Confidence
32%
Reports
2
Location
PL
PL
195.160.223.32
7/10
Confidence
26%
Reports
1
Location
NL
NL
31.42.177.96
10/10
Confidence
24%
Reports
5
Location
NL
NL
213.111.146.36
5/10
Confidence
24%
Reports
2
Location
NL
NL
89.42.91.189
6/10
Confidence
24%
Reports
1
Location
RO
RO
212.86.125.110
8/10
Confidence
23%
Reports
4
Location
NL
NL
85.137.54.93
4/10
Confidence
23%
Reports
2
Location
NL
NL
2a11:6100:0:1c72::
6/10
Confidence
23%
Reports
1
Location
PL
PL
85.137.59.176
4/10
Confidence
23%
Reports
1
Location
NL
NL
138.226.250.180
4/10
Confidence
23%
Reports
1
Location
PL
PL
138.226.250.160
4/10
Confidence
23%
Reports
1
Location
PL
PL
138.226.250.156
4/10
Confidence
23%
Reports
1
Location
PL
PL
2a11:6100:0:1339::
6/10
Confidence
23%
Reports
1
Location
PL
PL
85.137.54.85
4/10
Confidence
23%
Reports
1
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
57.128.222.79
10/10
Confidence
100%
Reports
28
ISP
OVH SAS
57.128.239.181
10/10
Confidence
100%
Reports
23
ISP
OVH SAS
20.215.52.168
8/10
Confidence
98%
Reports
17
ISP
Microsoft Corpo...
51.83.133.35
10/10
Confidence
96%
Reports
40
ISP
OVH SAS
57.128.196.220
10/10
Confidence
96%
Reports
17
ISP
OVH SAS
185.241.208.172
10/10
Confidence
94%
Reports
80
ISP
1337 Services GmbH
85.11.120.12
10/10
Confidence
94%
Reports
38
ISP
Sileman Sp. z o.o.
193.34.212.123
10/10
Confidence
93%
Reports
2,031
ISP
MEVSPACE sp. z ...
185.241.208.146
8/10
Confidence
93%
Reports
472
ISP
1337 Services GmbH
185.241.208.78
8/10
Confidence
93%
Reports
254
ISP
1337 Services GmbH
77.83.101.41
8/10
Confidence
93%
Reports
94
ISP
Atman Sp. z o.o.
151.115.99.171
10/10
Confidence
88%
Reports
15
ISP
Scaleway SAS
91.150.199.81
8/10
Confidence
86%
Reports
16
ISP
Play
134.112.56.47
10/10
Confidence
85%
Reports
36
ISP
MICROSOFT-CORP-...
185.186.153.68
8/10
Confidence
85%
Reports
19
ISP
TELNAP TELECOM ...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
70%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.108.186.29
8/10
Confidence
70%
Reports
5
Location
US
US
105.77.208.167
8/10
Confidence
70%
Reports
10
Location
MA
MA
103.253.245.102
8/10
Confidence
70%
Reports
6
Location
ID
ID
158.23.176.177
7/10
Confidence
70%
Reports
45
Location
MX
MX
109.126.5.96
10/10
Confidence
70%
Reports
5
Location
RU
RU
163.223.49.137
10/10
Confidence
70%
Reports
8
Location
IN
IN
103.189.88.55
8/10
Confidence
70%
Reports
10
Location
SG
SG
109.160.32.139
10/10
Confidence
70%
Reports
5
Location
BG
BG
147.45.63.98
8/10
Confidence
70%
Reports
9
Location
DE
DE
178.105.176.231
10/10
Confidence
70%
Reports
10
Location
DE
DE
188.166.253.224
8/10
Confidence
70%
Reports
9
Location
SG
SG
89.109.45.190
10/10
Confidence
70%
Reports
5
Location
RU
RU
202.71.156.76
10/10
Confidence
70%
Reports
5
Location
IN
IN
152.69.166.208
8/10
Confidence
70%
Reports
56
Location
AU
AU
35.203.11.55
10/10
Confidence
70%
Reports
5
Location
CA
CA