Measured Risk
IP 213.209.157.229 threat rating: 5/10 from 45 observations.
Attention-worthy behavior detected. Confidence: 57%.
More threatening than 40% of monitored IPs
IP Address
213.209.157.229
IPv4
Public
DE
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Below Average Risk
DE
Location
Moon Dc
ASN 208485
45
Reports
Honeypot
Data Source
Threat Categories
Email Spam
30
Technical Details
Email spam involves mass distribution of unwanted emails, often for advertising, phishing, or malware delivery.
Recommended Mitigations
Implement SPF, DKIM, DMARC, and use reputable email filtering services.
Moderate Network Risk
The network hosting this IP (ASN 208485, operated by Moon Dc) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Standard security protocols sufficient. Monitor but no immediate blocking required.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
5/10
Medium
Medium
Activity Frequency
0/10
Inactive
Confidence Score
55%
High Confidence
Confidence History
25. Sep 2025
57%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Email Spam | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 213.209.157.229
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
DE
- ASN
- AS208485
- ISP
- Moon Dc
DNS Information
- Reverse DNS
- uhgandu.click
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 45
- First Reported
- 25 Sep 2025
- Last Reported
- 25 Sep 2025, 12:20
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS208485
Moon Dc
DE
Network Threat Assessment
6/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
34
Total IPs Monitored
39,495
Total Reports
1161.6
Reports per IP
Network Context
This IP address belongs to Moon Dc (AS208485), which manages 34 IP addresses in our monitoring system. Out of these, 39,495 have been reported for suspicious activities, resulting in a network-wide threat level of 6/10.
⚠️ Network Warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
40
%
Global Threat Ranking
This IP is more threatening than 40% of all IPs in our database.
Below Average ThreatGlobal Comparison
Compared against 154,262 reported IPs worldwide
Threat Level
5/10
avg: 4.8
=
Total Reports
45
avg: 28
++
Network Comparison
Compared against 34 IPs in ASN 208485
Threat Level
5/10
network avg: 7.4
-
Total Reports
45
network avg: 1,183
--
Network Moon Dc has overall threat level 6/10
Geographic Comparison
Compared against 6,157 IPs in DE
Threat Level
5/10
country avg: 5.3
=
Total Reports
45
country avg: 68
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
45 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
3/10
Current Threat
3/10
Distribution of threat categories reported over time.
Top Threat Categories
Email Spam
45
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 24 reports
Weekly Activity
Geographic Threat Distribution
145,633 threat incidents tracked globally • Last 24h: 18,501 Logs
FEED
Top Threat Sources
-
01
United States32,814 22.5% -
02
China23,520 16.2% -
03
India15,841 10.9% -
04
Brazil7,062 4.8% -
05
Germany6,147 4.2%
-
06
Singapore5,768 4% -
07
Indonesia4,039 2.8% -
08
Netherlands3,765 2.6% -
09
Russia3,708 2.5% -
10
United Kingdom3,679 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.6/10
Avg Threat
65%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
213.209.157.52
10/10
Confidence
78%
Reports
15
Location
DE
DE
213.209.157.94
10/10
Confidence
77%
Reports
16
Location
DE
DE
213.209.157.254
10/10
Confidence
76%
Reports
144
Location
DE
DE
213.209.157.77
10/10
Confidence
76%
Reports
34
Location
DE
DE
213.209.157.162
10/10
Confidence
73%
Reports
91
Location
DE
DE
213.209.157.24
10/10
Confidence
71%
Reports
69
Location
DE
DE
213.209.157.218
10/10
Confidence
71%
Reports
13
Location
DE
DE
213.209.157.84
8/10
Confidence
60%
Reports
58
Location
DE
DE
213.209.157.47
8/10
Confidence
60%
Reports
54
Location
DE
DE
213.209.157.55
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.57
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.49
8/10
Confidence
60%
Reports
44
Location
DE
DE
213.209.157.53
8/10
Confidence
60%
Reports
43
Location
DE
DE
213.209.157.45
8/10
Confidence
60%
Reports
38
Location
DE
DE
213.209.157.199
8/10
Confidence
60%
Reports
36
Location
DE
DE
213.209.157.27
8/10
Confidence
60%
Reports
34
Location
DE
DE
213.209.157.36
8/10
Confidence
60%
Reports
30
Location
DE
DE
213.209.157.34
8/10
Confidence
60%
Reports
27
Location
DE
DE
213.209.157.193
8/10
Confidence
60%
Reports
20
Location
DE
DE
213.209.157.225
5/10
Confidence
59%
Reports
341
Location
DE
DE
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.6/10
Avg Threat
65%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
213.209.157.52
10/10
Confidence
78%
Reports
15
Location
DE
DE
213.209.157.94
10/10
Confidence
77%
Reports
16
Location
DE
DE
213.209.157.254
10/10
Confidence
76%
Reports
144
Location
DE
DE
213.209.157.77
10/10
Confidence
76%
Reports
34
Location
DE
DE
213.209.157.162
10/10
Confidence
73%
Reports
91
Location
DE
DE
213.209.157.24
10/10
Confidence
71%
Reports
69
Location
DE
DE
213.209.157.218
10/10
Confidence
71%
Reports
13
Location
DE
DE
213.209.157.84
8/10
Confidence
60%
Reports
58
Location
DE
DE
213.209.157.47
8/10
Confidence
60%
Reports
54
Location
DE
DE
213.209.157.55
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.57
8/10
Confidence
60%
Reports
51
Location
DE
DE
213.209.157.49
8/10
Confidence
60%
Reports
44
Location
DE
DE
213.209.157.53
8/10
Confidence
60%
Reports
43
Location
DE
DE
213.209.157.45
8/10
Confidence
60%
Reports
38
Location
DE
DE
213.209.157.199
8/10
Confidence
60%
Reports
36
Location
DE
DE
213.209.157.27
8/10
Confidence
60%
Reports
34
Location
DE
DE
213.209.157.36
8/10
Confidence
60%
Reports
30
Location
DE
DE
213.209.157.34
8/10
Confidence
60%
Reports
27
Location
DE
DE
213.209.157.193
8/10
Confidence
60%
Reports
20
Location
DE
DE
213.209.157.225
5/10
Confidence
59%
Reports
341
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
118.193.59.142
7/10
Confidence
100%
Reports
72
ISP
UCLOUD INFORMAT...
95.89.149.179
10/10
Confidence
100%
Reports
67
ISP
Vodafone GmbH
80.158.109.51
10/10
Confidence
100%
Reports
61
ISP
T-Systems Inter...
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
213.209.159.151
10/10
Confidence
100%
Reports
28
ISP
Dgn Teknoloji A.s.
207.154.230.149
10/10
Confidence
100%
Reports
25
ISP
DigitalOcean, LLC
84.233.216.142
8/10
Confidence
100%
Reports
16
ISP
Datacamp Limited
83.97.23.180
8/10
Confidence
100%
Reports
14
ISP
M247 Europe SRL
89.163.151.66
8/10
Confidence
100%
Reports
14
ISP
WIIT AG
130.12.181.102
8/10
Confidence
99%
Reports
1,225
ISP
Netiface LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.9/10
Avg Threat
57%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
91.92.240.37
5/10
Confidence
57%
Reports
3,444
Location
DE
DE
158.94.210.190
7/10
Confidence
57%
Reports
603
Location
NL
NL
89.213.174.247
5/10
Confidence
57%
Reports
393
Location
RO
RO
188.166.127.118
8/10
Confidence
57%
Reports
261
Location
NL
NL
158.94.209.8
7/10
Confidence
57%
Reports
253
Location
NL
NL
122.3.88.147
10/10
Confidence
57%
Reports
203
Location
PH
PH
15.235.28.124
8/10
Confidence
57%
Reports
146
Location
CA
CA
188.166.109.145
10/10
Confidence
57%
Reports
136
Location
NL
NL
77.83.39.128
8/10
Confidence
57%
Reports
97
Location
DE
DE
68.183.16.91
10/10
Confidence
57%
Reports
79
Location
US
US
103.110.127.136
8/10
Confidence
57%
Reports
57
Location
IN
IN
165.22.227.200
10/10
Confidence
57%
Reports
44
Location
CA
CA
78.153.140.195
10/10
Confidence
57%
Reports
40
Location
GB
GB
176.46.138.45
5/10
Confidence
57%
Reports
39
Location
US
US
64.31.27.182
7/10
Confidence
57%
Reports
34
Location
FR
FR