Critical Alert
Security alert: 45.194.37.246 rated 10/10 based on 39 verified incidents.
Threat profile indicates sustained malicious activity with 96% confidence rating.
More threatening than 99% of monitored IPs
IP Address
45.194.37.246
IPv4
Public
MU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
MU
Location
Antbox Networks Limited
ASN 138995
39
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
3
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
11. May 2026
Last Activity
29. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 138995) with generally good reputation. The ISP Antbox Networks Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
86%
Verified
Confidence History
25. Feb 2026 - 29. May 2026
96%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 45.194.37.246
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
MU
- ASN
- AS138995
- ISP
- Antbox Networks Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 39
- First Reported
- 22 Feb 2026
- Last Reported
- 29 May 2026, 02:09
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS138995
Antbox Networks Limited
SC
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
6
Total IPs Monitored
84
Total Reports
14
Reports per IP
Network Context
This IP address belongs to Antbox Networks Limited (AS138995), which manages 6 IP addresses in our monitoring system. Out of these, 84 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,335 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
39
avg: 23
++
Network Comparison
Compared against 6 IPs in ASN 138995
Threat Level
10/10
network avg: 2.8
++
Total Reports
39
network avg: 8
++
Network Antbox Networks Limited has overall threat level 1/10
Geographic Comparison
Compared against 33 IPs in MU
Threat Level
10/10
country avg: 7.4
+
Total Reports
39
country avg: 157
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 May 2026
4 reports
Daily Average
0.3
reports/day
Most Active
Friday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
38
Hacking
3
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8% -
06
Singapore6,475 3.5% -
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
1.4/10
Avg Threat
29%
Avg Confidence
1
High Threat
HK IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.194.70.250
10/10
Confidence
96%
Reports
83
ISP
UCLOUD INFORMAT...
45.194.70.252
10/10
Confidence
94%
Reports
76
ISP
UCLOUD INFORMAT...
45.194.70.249
10/10
Confidence
94%
Reports
60
ISP
UCLOUD INFORMAT...
45.194.70.253
10/10
Confidence
94%
Reports
50
ISP
UCLOUD INFORMAT...
45.205.1.5
10/10
Confidence
93%
Reports
2,948
ISP
Africa-on-Cloud-AS
45.195.221.26
10/10
Confidence
93%
Reports
89
ISP
UCLOUD INFORMAT...
45.194.70.254
10/10
Confidence
93%
Reports
72
ISP
UCLOUD INFORMAT...
45.194.70.248
10/10
Confidence
93%
Reports
55
ISP
UCLOUD INFORMAT...
197.225.146.23
10/10
Confidence
92%
Reports
86
ISP
MauritiusTelecom
197.227.8.186
10/10
Confidence
91%
Reports
96
ISP
MauritiusTelecom
45.194.70.251
8/10
Confidence
90%
Reports
60
ISP
UCLOUD INFORMAT...
41.191.229.226
10/10
Confidence
86%
Reports
31
ISP
Liquid Telecomm...
45.207.214.179
10/10
Confidence
76%
Reports
29
ISP
COGNETCLOUD
45.207.198.228
10/10
Confidence
75%
Reports
24
ISP
COGNETCLOUD
45.192.96.79
8/10
Confidence
65%
Reports
13
ISP
COGNETCLOUD-2
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.58.56.214
8/10
Confidence
96%
Reports
2,336
Location
US
US
18.116.101.220
8/10
Confidence
96%
Reports
2,170
Location
US
US
18.218.118.203
8/10
Confidence
96%
Reports
1,949
Location
US
US
45.148.10.183
10/10
Confidence
96%
Reports
1,929
Location
NL
NL
3.129.187.38
8/10
Confidence
96%
Reports
1,861
Location
US
US
3.130.168.2
8/10
Confidence
96%
Reports
1,647
Location
US
US
3.131.220.121
8/10
Confidence
96%
Reports
1,306
Location
US
US
3.132.26.232
8/10
Confidence
96%
Reports
939
Location
US
US
185.91.127.85
10/10
Confidence
96%
Reports
921
Location
DE
DE
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
3.134.216.108
8/10
Confidence
96%
Reports
740
Location
US
US
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
106.75.184.142
10/10
Confidence
96%
Reports
677
Location
CN
CN
106.75.156.189
10/10
Confidence
96%
Reports
670
Location
CN
CN
106.75.157.47
10/10
Confidence
96%
Reports
661
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203