Medium Threat
Medium risk rating 5/10 for IP 213.209.157.138 based on 104 incidents.
Suspicious behavior markers present. 56% confidence level.
More threatening than 40% of monitored IPs
IP Address
213.209.157.138
IPv4
Public
DE
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Below Average Risk
DE
Location
Moon Dc
ASN 208485
104
Reports
Honeypot
Data Source
Threat Categories
Email Spam
30
Technical Details
Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.
Recommended Mitigations
Implement SPF, DKIM, DMARC, and use reputable email filtering services.
Moderate Network Risk
The network hosting this IP (ASN 208485, operated by Moon Dc) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Monitor traffic patterns. Review logs periodically for escalation.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
0/10
Inactive
Confidence Score
55%
High Confidence
Confidence History
16. Sep 2025
56%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 213.209.157.138
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
DE
- ASN
- AS208485
- ISP
- Moon Dc
DNS Information
- Reverse DNS
- oklisfy.click
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 104
- First Reported
- 15 Sep 2025
- Last Reported
- 16 Sep 2025, 06:08
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS208485
Moon Dc
DE
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
34
Total IPs Monitored
39,495
Total Reports
1161.6
Reports per IP
Network Context
This IP address belongs to Moon Dc (AS208485), which manages 34 IP addresses in our monitoring system. Out of these, 39,495 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
⚠️ Network Warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
40
%
Global Threat Ranking
This IP is more threatening than 40% of all IPs in our database.
Below Average ThreatGlobal Comparison
Compared against 152,852 reported IPs worldwide
Threat Level
5/10
avg: 4.8
=
Total Reports
104
avg: 28
++
Network Comparison
Compared against 34 IPs in ASN 208485
Threat Level
5/10
network avg: 7.4
-
Total Reports
104
network avg: 1,183
--
Network Moon Dc has overall threat level 6/10
Geographic Comparison
Compared against 6,128 IPs in DE
Threat Level
5/10
country avg: 5.3
=
Total Reports
104
country avg: 69
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
56 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
3/10
Current Threat
3/10
Distribution of threat categories reported over time.
Top Threat Categories
Email Spam
104
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 14 reports
Weekly Activity
Geographic Threat Distribution
144,369 threat incidents tracked globally • Last 24h: 19,271 Logs
FEED
Top Threat Sources
-
01
United States32,739 22.7% -
02
China23,441 16.2% -
03
India15,213 10.5% -
04
Brazil7,010 4.9% -
05
Germany6,128 4.2%
-
06
Singapore5,759 4% -
07
Indonesia3,995 2.8% -
08
Netherlands3,749 2.6% -
09
Russia3,688 2.6% -
10
United Kingdom3,671 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
65%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
213.209.157.52
10/10
Confidence
78%
Reports
15
Location
DE
DE
213.209.157.94
10/10
Confidence
77%
Reports
16
Location
DE
DE
213.209.157.254
10/10
Confidence
76%
Reports
144
Location
DE
DE
213.209.157.77
10/10
Confidence
76%
Reports
34
Location
DE
DE
213.209.157.162
10/10
Confidence
73%
Reports
91
Location
DE
DE
213.209.157.24
10/10
Confidence
71%
Reports
69
Location
DE
DE
213.209.157.218
10/10
Confidence
71%
Reports
13
Location
DE
DE
213.209.157.84
8/10
Confidence
60%
Reports
58
Location
DE
DE
213.209.157.47
8/10
Confidence
60%
Reports
54
Location
DE
DE
213.209.157.55
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.57
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.49
8/10
Confidence
60%
Reports
44
Location
DE
DE
213.209.157.53
8/10
Confidence
60%
Reports
43
Location
DE
DE
213.209.157.45
8/10
Confidence
60%
Reports
38
Location
DE
DE
213.209.157.199
8/10
Confidence
60%
Reports
36
Location
DE
DE
213.209.157.27
8/10
Confidence
60%
Reports
34
Location
DE
DE
213.209.157.36
8/10
Confidence
60%
Reports
30
Location
DE
DE
213.209.157.34
8/10
Confidence
60%
Reports
27
Location
DE
DE
213.209.157.193
8/10
Confidence
60%
Reports
20
Location
DE
DE
213.209.157.225
5/10
Confidence
59%
Reports
341
Location
DE
DE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.6/10
Avg Threat
65%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
213.209.157.52
10/10
Confidence
78%
Reports
15
Location
DE
DE
213.209.157.94
10/10
Confidence
77%
Reports
16
Location
DE
DE
213.209.157.254
10/10
Confidence
76%
Reports
144
Location
DE
DE
213.209.157.77
10/10
Confidence
76%
Reports
34
Location
DE
DE
213.209.157.162
10/10
Confidence
73%
Reports
91
Location
DE
DE
213.209.157.24
10/10
Confidence
71%
Reports
69
Location
DE
DE
213.209.157.218
10/10
Confidence
71%
Reports
13
Location
DE
DE
213.209.157.84
8/10
Confidence
60%
Reports
58
Location
DE
DE
213.209.157.47
8/10
Confidence
60%
Reports
54
Location
DE
DE
213.209.157.55
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.57
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.49
8/10
Confidence
60%
Reports
44
Location
DE
DE
213.209.157.53
8/10
Confidence
60%
Reports
43
Location
DE
DE
213.209.157.45
8/10
Confidence
60%
Reports
38
Location
DE
DE
213.209.157.199
8/10
Confidence
60%
Reports
36
Location
DE
DE
213.209.157.27
8/10
Confidence
60%
Reports
34
Location
DE
DE
213.209.157.36
8/10
Confidence
60%
Reports
30
Location
DE
DE
213.209.157.34
8/10
Confidence
60%
Reports
27
Location
DE
DE
213.209.157.193
8/10
Confidence
60%
Reports
20
Location
DE
DE
213.209.157.225
5/10
Confidence
59%
Reports
341
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
118.193.59.142
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
95.89.149.179
10/10
Confidence
100%
Reports
67
ISP
Vodafone GmbH
80.158.109.51
10/10
Confidence
100%
Reports
61
ISP
T-Systems Inter...
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
213.209.159.151
10/10
Confidence
100%
Reports
28
ISP
Dgn Teknoloji A.s.
207.154.230.149
10/10
Confidence
100%
Reports
25
ISP
DigitalOcean, LLC
84.233.216.142
8/10
Confidence
100%
Reports
16
ISP
Datacamp Limited
89.163.151.66
8/10
Confidence
100%
Reports
14
ISP
WIIT AG
130.12.181.102
8/10
Confidence
99%
Reports
1,225
ISP
Netiface LLC
130.12.181.101
8/10
Confidence
99%
Reports
1,208
ISP
Netiface LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
56%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
77.83.39.4
5/10
Confidence
56%
Reports
3,346
Location
DE
DE
198.55.98.165
5/10
Confidence
56%
Reports
590
Location
US
US
89.213.174.87
5/10
Confidence
56%
Reports
502
Location
RO
RO
89.213.174.78
5/10
Confidence
56%
Reports
498
Location
RO
RO
198.55.98.249
5/10
Confidence
56%
Reports
303
Location
US
US
104.244.74.96
7/10
Confidence
56%
Reports
215
Location
LU
LU
45.61.188.177
7/10
Confidence
56%
Reports
178
Location
US
US
107.189.13.239
7/10
Confidence
56%
Reports
134
Location
LU
LU
45.227.253.94
10/10
Confidence
56%
Reports
127
Location
PA
PA
205.185.115.27
7/10
Confidence
56%
Reports
106
Location
US
US
45.84.107.222
8/10
Confidence
56%
Reports
102
Location
SE
SE
157.245.187.76
10/10
Confidence
56%
Reports
79
Location
US
US
96.126.96.52
10/10
Confidence
56%
Reports
79
Location
US
US
45.84.107.76
8/10
Confidence
56%
Reports
78
Location
SE
SE
171.231.178.172
10/10
Confidence
56%
Reports
62
Location
VN
VN