Critical Threat
IP 172.110.223.5 is a critical-risk address associated with systematic hacking activity, registered to Superhub Limited in the Czech Republic and flagged with a maximum threat score of 10/10 across 457 aggregate abuse reports from automated honeypot sensors.
The IP accumulated these 457 reports over a concentrated January–February 2026 window, all sourced from automated honeypot infrastructure detecting unauthorized intrusion attempts. The confidence score of 64% reflects the volume and consistency of the reporting despite the relatively compressed timeframe. Geolocation places the source within Czech Republic networks, and network attribution identifies Superhub Limited as the responsible autonomous system operator. The dominance of hacking-category reports indicates sustained probing and exploitation attempts rather than opportunistic noise.
Hacking activity as classified by these detection systems encompasses vulnerability scanning, exploitation attempts against exposed services, and unauthorized access probes. An address with this volume of hostile contact history poses concrete risk to any exposed service — particularly those running outdated software, weak authentication mechanisms, or publicly accessible administrative interfaces. The pattern suggests automated tooling cycling through known exploit vectors against a broad target scope, consistent with bot-driven scanning operations rather than isolated manual probes.
Network operators should block this IP at the firewall or edge-device level using existing blocklists fed by community threat-intelligence sources. Exposed services should enforce strong, unique credentials and consider deploying defensive tools such as fail2ban to auto-ban repeat offenders. Keeping systems patched and monitoring logs for the signature patterns associated with this source will further reduce exposure risk.