Elevated Risk
IP 45.84.107.33, allocated to Swedish network operator QuxLabs AB (AS214503), presents a high-risk threat profile with a threat level of 8 out of 10 and a confidence score of 66 percent based on 231 total abuse reports gathered over approximately eight months of active observation. The dominant threat activity detected against this address consists of general hacking intrusion attempts, followed by brute-force authentication attacks, port scanning reconnaissance, and SSH-specific exploitation activity. Automated honeypot sensors contributed 15 of the 20 reporting sources, with an additional 5 community-based reports corroborating the malicious behavior observed across this IP address.
The reporting timeline for IP 45.84.107.33 spans from September 2025 through May 2026, indicating sustained hostile activity over a prolonged period rather than a transient or opportunistic scanning event. The activity frequency rating of 3 out of 10 suggests the IP operates with deliberate pacing, likely to evade simple threshold-based detection systems while maintaining persistent probing operations. The attack-pattern data extracted from honeypot sensors documents CiscoASA port scanning and probing activity, general attack connections, and confirmed SSH brute-force attempts against exposed authentication endpoints. Notably, some attack sequences combine port scanning reconnaissance with malware or exploit delivery attempts, indicating a multi-stage attack methodology designed to identify and compromise vulnerable network services.
Port scanning activity like that observed from this IP address serves as reconnaissance, systematically probing target networks to map open services and identify potential entry points for subsequent exploitation. The brute-force attacks targeting SSH services represent a direct credential-guessing assault that, if successful, grants attackers unauthorized remote access to servers and infrastructure. The combination of these techniques indicates an actor engaged in systematic network compromise rather than opportunistic scanning, with the ability to adapt attack chains based on discovered vulnerabilities. Organizations exposing SSH services or maintaining perimeter devices vulnerable to scanning face concrete risk of unauthorized access, data exfiltration, or further network penetration if this threat actor's activity goes unchecked.
FR 
HK 
VN