AS8473 — Bahnhof AB Threat Intelligence

Network Threat Summary

AS8473 (Bahnhof AB) has 748 malicious IP addresses with 27,386 abuse reports across 2 countries. First activity recorded 2022-08-24, most recent activity 2026-04-16.

Threat Profile: The primary attack categories observed from this network are suspicious activity, severe abuse, ssh bruteforce. Limited threat indicators have been observed from this network. Affected countries include SE, NO, DE.

Risk Assessment: LOW - Minor threat activity from this network. Standard security monitoring is sufficient.

Top Attack Categories

• Suspicious Activity 10,062 reports
• Severe Abuse 8,394 reports
• Ssh Bruteforce 957 reports
• High Threat 907 reports
• Aggregated Threat 663 reports

Top Affected Countries

• SE 28,995 reports
• NO 5 reports
• DE 3 reports

Most Reported IPs

• 195.178.191.5 616 reports
• 94.254.0.234 470 reports
• 158.174.210.161 445 reports
• 155.4.244.169 432 reports
• 158.174.211.17 404 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS8473 threat data into your security stack with our REST API.

See how we classify and verify threats →