Critical Alert
Security alert: 2.57.122.53 rated 10/10 based on 30 verified incidents.
Threat profile indicates sustained malicious activity with 94% confidence rating.
More threatening than 98% of monitored IPs
IP Address
2.57.122.53
IPv4
Public
RO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Romania
Location
Unmanaged Ltd
ASN 47890
30
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Hacking
29
Exploited Host
7
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
12. May 2026
Last Activity
14. May 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 47890) with elevated threat levels. The ISP Unmanaged Ltd hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
94%
Verified
Confidence History
12. May 2026 - 14. May 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host SSH Hacking | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 2.57.122.53
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
RO
- ASN
- AS47890
- ISP
- Unmanaged Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 30
- First Reported
- 12 May 2026
- Last Reported
- 14 May 2026, 17:36
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS47890
Unmanaged Ltd
RO
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
185
Total IPs Monitored
149,970
Total Reports
810.6
Reports per IP
Network Context
This IP address belongs to Unmanaged Ltd (AS47890), which manages 185 IP addresses in our monitoring system. Out of these, 149,970 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,322 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
30
avg: 23
+
Network Comparison
Compared against 190 IPs in ASN 47890
Threat Level
10/10
network avg: 7.8
+
Total Reports
30
network avg: 806
--
Network Unmanaged Ltd has overall threat level 8/10
Geographic Comparison
Compared against 627 IPs in RO
Threat Level
10/10
country avg: 6.2
++
Total Reports
30
country avg: 259
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
13 May 2026
21 reports
Daily Average
1
reports/day
Most Active
Wednesday
21 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
30
Hacking
29
Exploited Host
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8% -
06
Singapore6,475 3.5% -
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.192
7/10
Confidence
100%
Reports
31
Location
RO
RO
193.32.162.35
10/10
Confidence
98%
Reports
992
Location
RO
RO
2.57.122.192
10/10
Confidence
98%
Reports
19
Location
RO
RO
193.32.162.104
10/10
Confidence
96%
Reports
150
Location
RO
RO
2.57.122.189
10/10
Confidence
95%
Reports
19
Location
RO
RO
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
193.32.162.34
10/10
Confidence
94%
Reports
1,819
Location
RO
RO
80.94.92.187
10/10
Confidence
94%
Reports
811
Location
RO
RO
193.32.162.82
10/10
Confidence
94%
Reports
682
Location
RO
RO
45.148.9.8
8/10
Confidence
94%
Reports
440
Location
US
US
193.46.255.86
10/10
Confidence
94%
Reports
393
Location
RO
RO
80.94.92.186
10/10
Confidence
94%
Reports
303
Location
RO
RO
80.94.92.166
10/10
Confidence
94%
Reports
200
Location
RO
RO
92.118.39.97
10/10
Confidence
94%
Reports
32
Location
US
US
92.118.39.236
10/10
Confidence
94%
Reports
23
Location
RO
RO
2.57.122.196
10/10
Confidence
94%
Reports
13
Location
RO
RO
92.118.39.59
8/10
Confidence
93%
Reports
44
Location
US
US
2.57.122.162
10/10
Confidence
92%
Reports
18
Location
RO
RO
193.32.162.142
10/10
Confidence
91%
Reports
946
Location
RO
RO
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.8/10
Avg Threat
82%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
2.57.122.192
10/10
Confidence
98%
Reports
19
Location
RO
RO
2.57.122.189
10/10
Confidence
95%
Reports
19
Location
RO
RO
2.57.122.196
10/10
Confidence
94%
Reports
13
Location
RO
RO
2.57.122.162
10/10
Confidence
92%
Reports
18
Location
RO
RO
2.57.122.190
10/10
Confidence
91%
Reports
17
Location
RO
RO
2.57.122.191
10/10
Confidence
90%
Reports
14
Location
RO
RO
2.57.122.177
10/10
Confidence
86%
Reports
12,462
Location
RO
RO
2.57.122.96
10/10
Confidence
86%
Reports
1,017
Location
RO
RO
2.57.122.89
8/10
Confidence
86%
Reports
325
Location
RO
RO
2.57.122.208
10/10
Confidence
83%
Reports
2,772
Location
RO
RO
2.57.122.210
10/10
Confidence
81%
Reports
556
Location
RO
RO
2.57.122.199
10/10
Confidence
80%
Reports
14
Location
RO
RO
2.57.122.197
10/10
Confidence
80%
Reports
12
Location
RO
RO
2.57.122.194
10/10
Confidence
79%
Reports
12
Location
RO
RO
2.57.122.195
10/10
Confidence
79%
Reports
11
Location
RO
RO
2.57.122.238
10/10
Confidence
71%
Reports
13,914
Location
RO
RO
2.57.122.193
10/10
Confidence
69%
Reports
10
Location
RO
RO
2.57.122.159
8/10
Confidence
68%
Reports
19
Location
RO
RO
2.57.122.209
10/10
Confidence
63%
Reports
2,573
Location
RO
RO
2.57.122.29
10/10
Confidence
62%
Reports
96
Location
RO
RO
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
80.94.95.211
10/10
Confidence
100%
Reports
49
ISP
SS-Net
82.152.132.24
10/10
Confidence
100%
Reports
36
ISP
X-zone It Srl
193.32.162.192
7/10
Confidence
100%
Reports
31
ISP
Unmanaged Ltd
193.32.162.35
10/10
Confidence
98%
Reports
992
ISP
Unmanaged Ltd
2.57.122.192
10/10
Confidence
98%
Reports
19
ISP
Unmanaged Ltd
89.44.137.240
8/10
Confidence
97%
Reports
30
ISP
ROMARG SRL
193.32.162.104
10/10
Confidence
96%
Reports
150
ISP
Unmanaged Ltd
80.94.95.7
7/10
Confidence
96%
Reports
31
ISP
SS-Net
2.57.122.189
10/10
Confidence
95%
Reports
19
ISP
Unmanaged Ltd
193.32.162.28
10/10
Confidence
94%
Reports
5,435
ISP
Unmanaged Ltd
193.32.162.34
10/10
Confidence
94%
Reports
1,819
ISP
Unmanaged Ltd
80.94.92.187
10/10
Confidence
94%
Reports
811
ISP
Unmanaged Ltd
193.32.162.82
10/10
Confidence
94%
Reports
682
ISP
Unmanaged Ltd
45.142.193.6
10/10
Confidence
94%
Reports
553
ISP
Skynet Network Ltd
193.46.255.86
10/10
Confidence
94%
Reports
393
ISP
Unmanaged Ltd
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
51.68.207.118
10/10
Confidence
94%
Reports
5,251
Location
FR
FR
185.246.128.133
10/10
Confidence
94%
Reports
5,108
Location
SE
SE
185.233.247.245
8/10
Confidence
94%
Reports
3,686
Location
TR
TR
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
66.132.172.162
10/10
Confidence
94%
Reports
3,321
Location
US
US
66.132.172.165
10/10
Confidence
94%
Reports
3,320
Location
US
US
66.132.172.175
10/10
Confidence
94%
Reports
3,313
Location
US
US
66.132.172.164
10/10
Confidence
94%
Reports
3,304
Location
US
US
66.132.172.167
10/10
Confidence
94%
Reports
3,299
Location
US
US
66.132.172.171
10/10
Confidence
94%
Reports
3,284
Location
US
US
66.132.172.160
8/10
Confidence
94%
Reports
3,269
Location
US
US
66.132.172.161
10/10
Confidence
94%
Reports
3,268
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203