High Risk
IP 213.209.157.193 rated at threat level 8/10 based on 20 security reports.
Pattern analysis reveals concerning activity. Confidence: 60%.
More threatening than 75% of monitored IPs
IP Address
213.209.157.193
IPv4
Public
DE
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Above Average Risk
DE
Location
Moon Dc
ASN 208485
20
Reports
Honeypot
Data Source
Threat Categories
SSH
20
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Moderate Network Risk
The network hosting this IP (ASN 208485, operated by Moon Dc) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
58%
High Confidence
Confidence History
14. Sep 2025 - 21. Sep 2025
60%
Current
Stable
Trend
Security Reports (20)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 213.209.157.193
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
DE
- ASN
- AS208485
- ISP
- Moon Dc
DNS Information
- Reverse DNS
- topeqxu.click
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 20
- First Reported
- 14 Sep 2025
- Last Reported
- 21 Sep 2025, 01:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS208485
Moon Dc
DE
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
34
Total IPs Monitored
39,495
Total Reports
1161.6
Reports per IP
Network Context
This IP address belongs to Moon Dc (AS208485), which manages 34 IP addresses in our monitoring system. Out of these, 39,495 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
⚠️ Network Warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
75
%
Global Threat Ranking
This IP is more threatening than 75% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 154,549 reported IPs worldwide
Threat Level
8/10
avg: 4.8
++
Total Reports
20
avg: 28
-
Network Comparison
Compared against 34 IPs in ASN 208485
Threat Level
8/10
network avg: 7.4
=
Total Reports
20
network avg: 1,183
--
Network Moon Dc has overall threat level 6/10
Geographic Comparison
Compared against 6,162 IPs in DE
Threat Level
8/10
country avg: 5.3
++
Total Reports
20
country avg: 68
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
20
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
145,992 threat incidents tracked globally • Last 24h: 18,549 Logs
FEED
Top Threat Sources
-
01
United States32,896 22.5% -
02
China23,542 16.1% -
03
India15,912 10.9% -
04
Brazil7,105 4.9% -
05
Germany6,162 4.2%
-
06
Singapore5,771 4% -
07
Indonesia4,045 2.8% -
08
Netherlands3,780 2.6% -
09
Russia3,710 2.5% -
10
United Kingdom3,684 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.4/10
Avg Threat
65%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
213.209.157.52
10/10
Confidence
78%
Reports
15
Location
DE
DE
213.209.157.94
10/10
Confidence
77%
Reports
16
Location
DE
DE
213.209.157.254
10/10
Confidence
76%
Reports
144
Location
DE
DE
213.209.157.77
10/10
Confidence
76%
Reports
34
Location
DE
DE
213.209.157.162
10/10
Confidence
73%
Reports
91
Location
DE
DE
213.209.157.24
10/10
Confidence
71%
Reports
69
Location
DE
DE
213.209.157.218
10/10
Confidence
71%
Reports
13
Location
DE
DE
213.209.157.84
8/10
Confidence
60%
Reports
58
Location
DE
DE
213.209.157.47
8/10
Confidence
60%
Reports
54
Location
DE
DE
213.209.157.55
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.57
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.49
8/10
Confidence
60%
Reports
44
Location
DE
DE
213.209.157.53
8/10
Confidence
60%
Reports
43
Location
DE
DE
213.209.157.45
8/10
Confidence
60%
Reports
38
Location
DE
DE
213.209.157.199
8/10
Confidence
60%
Reports
36
Location
DE
DE
213.209.157.27
8/10
Confidence
60%
Reports
34
Location
DE
DE
213.209.157.36
8/10
Confidence
60%
Reports
30
Location
DE
DE
213.209.157.34
8/10
Confidence
60%
Reports
27
Location
DE
DE
213.209.157.225
5/10
Confidence
59%
Reports
341
Location
DE
DE
213.209.157.229
5/10
Confidence
57%
Reports
45
Location
DE
DE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.4/10
Avg Threat
65%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
213.209.157.52
10/10
Confidence
78%
Reports
15
Location
DE
DE
213.209.157.94
10/10
Confidence
77%
Reports
16
Location
DE
DE
213.209.157.254
10/10
Confidence
76%
Reports
144
Location
DE
DE
213.209.157.77
10/10
Confidence
76%
Reports
34
Location
DE
DE
213.209.157.162
10/10
Confidence
73%
Reports
91
Location
DE
DE
213.209.157.24
10/10
Confidence
71%
Reports
69
Location
DE
DE
213.209.157.218
10/10
Confidence
71%
Reports
13
Location
DE
DE
213.209.157.84
8/10
Confidence
60%
Reports
58
Location
DE
DE
213.209.157.47
8/10
Confidence
60%
Reports
54
Location
DE
DE
213.209.157.55
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.57
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.49
8/10
Confidence
60%
Reports
44
Location
DE
DE
213.209.157.53
8/10
Confidence
60%
Reports
43
Location
DE
DE
213.209.157.45
8/10
Confidence
60%
Reports
38
Location
DE
DE
213.209.157.199
8/10
Confidence
60%
Reports
36
Location
DE
DE
213.209.157.27
8/10
Confidence
60%
Reports
34
Location
DE
DE
213.209.157.36
8/10
Confidence
60%
Reports
30
Location
DE
DE
213.209.157.34
8/10
Confidence
60%
Reports
27
Location
DE
DE
213.209.157.225
5/10
Confidence
59%
Reports
341
Location
DE
DE
213.209.157.229
5/10
Confidence
57%
Reports
45
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
118.193.59.142
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
95.89.149.179
10/10
Confidence
100%
Reports
67
ISP
Vodafone GmbH
80.158.109.51
10/10
Confidence
100%
Reports
61
ISP
T-Systems Inter...
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
213.209.159.151
10/10
Confidence
100%
Reports
28
ISP
Dgn Teknoloji A.s.
207.154.230.149
10/10
Confidence
100%
Reports
25
ISP
DigitalOcean, LLC
84.233.216.142
8/10
Confidence
100%
Reports
16
ISP
Datacamp Limited
83.97.23.180
8/10
Confidence
100%
Reports
14
ISP
M247 Europe SRL
89.163.151.66
8/10
Confidence
100%
Reports
14
ISP
WIIT AG
130.12.181.102
8/10
Confidence
99%
Reports
1,225
ISP
Netiface LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.8/10
Avg Threat
60%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
95.214.55.246
10/10
Confidence
60%
Reports
12,325
Location
PL
PL
217.119.139.76
10/10
Confidence
60%
Reports
7,943
Location
RU
RU
207.174.1.152
10/10
Confidence
60%
Reports
7,840
Location
US
US
85.105.205.63
10/10
Confidence
60%
Reports
5,965
Location
TR
TR
146.70.178.116
10/10
Confidence
60%
Reports
2,593
Location
DE
DE
181.49.161.173
10/10
Confidence
60%
Reports
1,692
Location
CO
CO
185.11.61.252
10/10
Confidence
60%
Reports
1,291
Location
RU
RU
207.46.224.85
10/10
Confidence
60%
Reports
1,045
Location
SG
SG
77.83.39.131
7/10
Confidence
60%
Reports
1,040
Location
UA
UA
27.79.41.119
10/10
Confidence
60%
Reports
953
Location
VN
VN
15.235.122.237
10/10
Confidence
60%
Reports
887
Location
CA
CA
45.142.193.122
10/10
Confidence
60%
Reports
853
Location
RO
RO
198.23.159.62
10/10
Confidence
60%
Reports
838
Location
US
US
213.209.150.239
10/10
Confidence
60%
Reports
761
Location
DE
DE
61.7.241.149
10/10
Confidence
60%
Reports
712
Location
TH
TH