Substantial Risk
IP 64.62.197.2 is a high-risk address associated with persistent hacking activity detected across multiple automated honeypot sensors, with 369 abuse reports logged over approximately 11 months (August 2025–June 2026) and a threat level rating of 8/10 indicating significant danger to exposed systems.
Operating from the United States via AS6939 (Hurricane Electric), a major backbone network provider, this IP has generated a substantial abuse record with 91% confidence in its malicious classification. The detection footprint spans 20 separate automated honeypot sensors, reflecting widespread exposure across diverse network environments. The dominant threat category is general hacking activity, accounting for 19 of the 20 most recent reports, with isolated IoT-targeted behavior noted in parallel. Network inspection logs include application-layer protocol mismatch anomalies detected by intrusion analysis systems, suggesting the address engages in reconnaissance and exploitation attempts that probe for configuration weaknesses or vulnerable services.
The hacking activity linked to this IP encompasses unauthorized access attempts, vulnerability probing, and exploitation of services exposed to the internet. With an activity frequency rated 8/10, the sustained volume of connections indicates an automated or semi-automated campaign rather than isolated scanning. Concrete risks include credential compromise, data exfiltration, or further network penetration if vulnerable services are found. The protocol mismatch indicators further suggest the address may be testing firewall or IDS evasion techniques, adapting its approach to blend with legitimate traffic patterns.
Site operators should treat connections from this address as hostile and block or heavily rate-limit traffic at the network perimeter. Implement strict authentication requirements on any exposed services, particularly SSH, RDP, or web interfaces, and consider deploying fail2ban or equivalent dynamic blocking tools. Regular patching and configuration audits reduce the attack surface that this IP targets. Segmenting IoT devices and internal resources limits the impact of any successful intrusion originating from such a prolific source.
HK 
FR 
UA 
SC