Critical Alert
Security alert: 5.61.209.24 rated 10/10 based on 85 verified incidents.
Threat profile indicates sustained malicious activity with 83% confidence rating.
More threatening than 95% of monitored IPs
IP Address
5.61.209.24
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
SC
Location
Amarutu Technology Ltd
ASN 206264
85
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Web App Attack
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
13. May 2026
Last Activity
8. June 2026
Recent (7 days)
4 incidents
Moderate Network Risk
The network hosting this IP (ASN 206264, operated by Amarutu Technology Ltd) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
82%
Verified
Confidence History
6. Apr 2026 - 8. Jun 2026
83%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking Web App Attack | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.61.209.24
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
SC
- ASN
- AS206264
- ISP
- Amarutu Technology Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 85
- First Reported
- 26 Jan 2026
- Last Reported
- 8 Jun 2026, 19:11
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS206264
Amarutu Technology Ltd
SC
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
35
Total IPs Monitored
9,000
Total Reports
257.1
Reports per IP
Network Context
This IP address belongs to Amarutu Technology Ltd (AS206264), which manages 35 IP addresses in our monitoring system. Out of these, 9,000 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
95
%
Global Threat Ranking
This IP is more threatening than 95% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,475 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
85
avg: 23
++
Network Comparison
Compared against 45 IPs in ASN 206264
Threat Level
10/10
network avg: 8.5
+
Total Reports
85
network avg: 330
--
Network Amarutu Technology Ltd has overall threat level 4/10
Geographic Comparison
Compared against 357 IPs in SC
Threat Level
10/10
country avg: 7.3
+
Total Reports
85
country avg: 91
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Jun 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
85
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
90%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
89.42.231.200
10/10
Confidence
96%
Reports
231
Location
NL
NL
5.61.209.33
10/10
Confidence
96%
Reports
48
Location
SC
SC
5.61.209.224
10/10
Confidence
94%
Reports
2,497
Location
SC
SC
5.187.35.142
8/10
Confidence
94%
Reports
1,841
Location
NL
NL
5.187.35.26
8/10
Confidence
94%
Reports
1,811
Location
NL
NL
93.123.72.166
10/10
Confidence
94%
Reports
1,097
Location
NL
NL
5.61.209.107
10/10
Confidence
94%
Reports
501
Location
SC
SC
5.61.209.126
10/10
Confidence
94%
Reports
312
Location
SC
SC
45.139.122.80
8/10
Confidence
94%
Reports
263
Location
NL
NL
5.61.209.102
10/10
Confidence
94%
Reports
120
Location
SC
SC
93.123.72.132
10/10
Confidence
94%
Reports
49
Location
NL
NL
5.187.35.158
10/10
Confidence
94%
Reports
38
Location
NL
NL
89.42.231.160
10/10
Confidence
94%
Reports
21
Location
NL
NL
5.61.209.88
10/10
Confidence
94%
Reports
16
Location
SC
SC
89.42.231.239
10/10
Confidence
93%
Reports
37
Location
NL
NL
5.61.209.96
10/10
Confidence
80%
Reports
74
Location
SC
SC
89.42.231.137
10/10
Confidence
77%
Reports
32
Location
NL
NL
89.42.231.182
8/10
Confidence
74%
Reports
603
Location
NL
NL
183.81.169.235
10/10
Confidence
74%
Reports
189
Location
NL
NL
5.187.35.21
10/10
Confidence
74%
Reports
156
Location
NL
NL
IPs from the same subnet range, likely same network segment.
8
Related IPs
10/10
Avg Threat
89%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
5.61.209.33
10/10
Confidence
96%
Reports
48
Location
SC
SC
5.61.209.224
10/10
Confidence
94%
Reports
2,497
Location
SC
SC
5.61.209.107
10/10
Confidence
94%
Reports
501
Location
SC
SC
5.61.209.126
10/10
Confidence
94%
Reports
312
Location
SC
SC
5.61.209.102
10/10
Confidence
94%
Reports
120
Location
SC
SC
5.61.209.88
10/10
Confidence
94%
Reports
16
Location
SC
SC
5.61.209.96
10/10
Confidence
80%
Reports
74
Location
SC
SC
5.61.209.92
10/10
Confidence
63%
Reports
192
Location
NL
NL
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
68
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
48
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a01:04f8:c012:4640:0000:0000:0000:0001
10/10
Confidence
83%
Reports
19,893
Location
DE
DE
207.90.244.21
8/10
Confidence
83%
Reports
12,276
Location
US
US
207.90.244.22
8/10
Confidence
83%
Reports
12,094
Location
US
US
147.182.202.179
8/10
Confidence
83%
Reports
7,634
Location
US
US
130.12.181.108
8/10
Confidence
83%
Reports
3,208
Location
DE
DE
130.12.181.100
8/10
Confidence
83%
Reports
3,068
Location
DE
DE
2.57.122.208
10/10
Confidence
83%
Reports
2,772
Location
RO
RO
137.184.190.246
8/10
Confidence
83%
Reports
1,974
Location
US
US
80.94.92.71
10/10
Confidence
83%
Reports
1,718
Location
RO
RO
64.62.197.197
8/10
Confidence
83%
Reports
583
Location
US
US
80.94.92.184
10/10
Confidence
83%
Reports
577
Location
RO
RO
65.49.1.162
8/10
Confidence
83%
Reports
562
Location
US
US
167.94.146.49
8/10
Confidence
83%
Reports
552
Location
US
US
77.90.185.17
10/10
Confidence
83%
Reports
449
Location
DE
DE
14.18.190.138
10/10
Confidence
83%
Reports
437
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203