Substantial Risk
Threat level 8/10 for 198.38.81.62 based on 5 documented incidents.
Consistent suspicious behavior patterns. 61% confidence rating.
More threatening than 78% of monitored IPs
IP Address
198.38.81.62
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
India
Location
WHG Hosting Services Ltd
ASN 199404
5
Reports
Honeypot
Data Source
Threat Categories
SSH
5
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
16. May 2026
Last Activity
19. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 199404) with generally good reputation. The ISP WHG Hosting Services Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
51%
High Confidence
Confidence History
16. May 2026 - 19. May 2026
61%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 198.38.81.62
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
IN
- ASN
- AS199404
- ISP
- WHG Hosting Services Ltd
DNS Information
- Reverse DNS
- 603686-tigpublicschool.cloudhostdns.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 16 May 2026
- Last Reported
- 19 May 2026, 17:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS199404
WHG Hosting Services Ltd
IN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
10
Total IPs Monitored
172
Total Reports
17.2
Reports per IP
Network Context
This IP address belongs to WHG Hosting Services Ltd (AS199404), which manages 10 IP addresses in our monitoring system. Out of these, 172 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,609 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
5
avg: 23
--
Network Comparison
Compared against 20 IPs in ASN 199404
Threat Level
8/10
network avg: 8.4
=
Total Reports
5
network avg: 13
--
Network WHG Hosting Services Ltd has overall threat level 3/10
Geographic Comparison
Compared against 29,136 IPs in IN
Threat Level
8/10
country avg: 5.4
+
Total Reports
5
country avg: 5
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 May 2026
3 reports
Daily Average
0.2
reports/day
Most Active
Tuesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5%
-
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
19
Related IPs
8.4/10
Avg Threat
59%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
195.250.21.26
8/10
Confidence
100%
Reports
26
Location
IN
IN
195.250.20.172
8/10
Confidence
100%
Reports
19
Location
IN
IN
195.250.20.75
8/10
Confidence
96%
Reports
37
Location
IN
IN
198.38.85.149
10/10
Confidence
94%
Reports
20
Location
IN
IN
198.38.81.1
10/10
Confidence
93%
Reports
22
Location
IN
IN
103.118.17.109
10/10
Confidence
92%
Reports
26
Location
IN
IN
198.38.85.76
10/10
Confidence
86%
Reports
12
Location
IN
IN
69.57.172.212
10/10
Confidence
68%
Reports
8
Location
IN
IN
69.57.172.119
8/10
Confidence
56%
Reports
5
Location
IN
IN
198.38.81.14
8/10
Confidence
56%
Reports
4
Location
IN
IN
190.92.175.228
10/10
Confidence
53%
Reports
22
Location
IN
IN
190.92.174.21
8/10
Confidence
46%
Reports
4
Location
IN
IN
195.250.21.212
10/10
Confidence
38%
Reports
8
Location
IN
IN
69.57.172.96
10/10
Confidence
32%
Reports
22
Location
IN
IN
190.92.174.127
7/10
Confidence
30%
Reports
1
Location
IN
IN
195.250.30.134
7/10
Confidence
29%
Reports
1
Location
IN
IN
190.92.175.38
7/10
Confidence
17%
Reports
1
Location
IN
IN
195.250.31.127
4/10
Confidence
15%
Reports
1
Location
IN
IN
198.38.84.9
7/10
Confidence
12%
Reports
15
Location
IN
IN
IPs from the same subnet range, likely same network segment.
2
Related IPs
9/10
Avg Threat
75%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
274
ISP
Micro Hosting P...
188.241.62.83
8/10
Confidence
100%
Reports
188
ISP
LEAPSWITCH NETW...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
43.230.201.87
8/10
Confidence
100%
Reports
86
ISP
LEAPSWITCH NETW...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
142.93.215.41
8/10
Confidence
100%
Reports
81
ISP
DigitalOcean, LLC
203.192.232.180
10/10
Confidence
100%
Reports
72
ISP
ONEOTT INTERTAI...
122.180.21.11
10/10
Confidence
100%
Reports
67
ISP
Bharti Airtel L...
111.93.186.150
10/10
Confidence
100%
Reports
67
ISP
Tata Teleservic...
45.123.110.70
10/10
Confidence
100%
Reports
66
ISP
WISH NET PRIVAT...
59.97.138.72
10/10
Confidence
100%
Reports
61
ISP
National Intern...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
103.38.219.22
10/10
Confidence
100%
Reports
55
ISP
HEGHESCOM NETWO...
183.82.98.154
8/10
Confidence
100%
Reports
54
ISP
Atria Convergen...
112.196.0.228
8/10
Confidence
100%
Reports
51
ISP
Quadrant Televe...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
61%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
80.94.95.15
10/10
Confidence
61%
Reports
29,208
Location
RO
RO
3.131.215.38
8/10
Confidence
61%
Reports
15,106
Location
US
US
193.142.147.209
10/10
Confidence
61%
Reports
11,438
Location
DE
DE
196.251.84.225
10/10
Confidence
61%
Reports
10,123
Location
NL
NL
47.74.52.128
10/10
Confidence
61%
Reports
3,651
Location
JP
JP
80.94.92.40
10/10
Confidence
61%
Reports
3,501
Location
RO
RO
185.243.5.23
10/10
Confidence
61%
Reports
3,266
Location
HK
HK
117.181.194.65
10/10
Confidence
61%
Reports
3,169
Location
CN
CN
80.94.95.112
10/10
Confidence
61%
Reports
3,047
Location
RO
RO
185.243.5.36
10/10
Confidence
61%
Reports
2,015
Location
HK
HK
78.153.140.179
10/10
Confidence
61%
Reports
1,957
Location
GB
GB
188.166.17.103
10/10
Confidence
61%
Reports
1,937
Location
NL
NL
213.209.143.48
10/10
Confidence
61%
Reports
1,648
Location
DE
DE
185.191.127.110
8/10
Confidence
61%
Reports
1,624
Location
NL
NL
178.22.24.17
10/10
Confidence
61%
Reports
1,342
Location
RU
RU
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203