Extreme Threat
IP 198.38.81.1 classified at threat level 10/10 with 22 documented attacks.
Advanced threat indicators confirmed with 93% certainty.
More threatening than 97% of monitored IPs
IP Address
198.38.81.1
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
India
Location
WHG Hosting Services Ltd
ASN 199404
22
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
18
Hacking
5
SSH
4
Exploited Host
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
18. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 199404) with generally good reputation. The ISP WHG Hosting Services Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
85%
Verified
Confidence History
2. May 2026 - 18. May 2026
93%
Current
Stable
Trend
Security Reports (22)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Brute-Force | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Brute-Force | Honeypot | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Brute-Force | Honeypot | 75% | |
| Hacking SSH Brute-Force | Honeypot x3 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% | |
| Brute-Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 198.38.81.1
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
IN
- ASN
- AS199404
- ISP
- WHG Hosting Services Ltd
DNS Information
- Reverse DNS
- vps.pojotech.in
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 22
- First Reported
- 4 May 2026
- Last Reported
- 18 May 2026, 18:00
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS199404
WHG Hosting Services Ltd
IN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
10
Total IPs Monitored
172
Total Reports
17.2
Reports per IP
Network Context
This IP address belongs to WHG Hosting Services Ltd (AS199404), which manages 10 IP addresses in our monitoring system. Out of these, 172 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,982 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
22
avg: 23
=
Network Comparison
Compared against 20 IPs in ASN 199404
Threat Level
10/10
network avg: 8.4
+
Total Reports
22
network avg: 13
++
Network WHG Hosting Services Ltd has overall threat level 3/10
Geographic Comparison
Compared against 29,262 IPs in IN
Threat Level
10/10
country avg: 5.4
++
Total Reports
22
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 May 2026
1 reports
Daily Average
0.2
reports/day
Most Active
Saturday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
18
Hacking
5
SSH
4
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 20:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,879 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5% -
02
India29,222 15.6%
-
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
19
Related IPs
8.3/10
Avg Threat
57%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
195.250.21.26
8/10
Confidence
100%
Reports
26
Location
IN
IN
195.250.20.172
8/10
Confidence
100%
Reports
19
Location
IN
IN
195.250.20.75
8/10
Confidence
96%
Reports
37
Location
IN
IN
198.38.85.149
10/10
Confidence
94%
Reports
20
Location
IN
IN
103.118.17.109
10/10
Confidence
92%
Reports
26
Location
IN
IN
198.38.85.76
10/10
Confidence
86%
Reports
12
Location
IN
IN
69.57.172.212
10/10
Confidence
68%
Reports
8
Location
IN
IN
198.38.81.62
8/10
Confidence
61%
Reports
5
Location
IN
IN
69.57.172.119
8/10
Confidence
56%
Reports
5
Location
IN
IN
198.38.81.14
8/10
Confidence
56%
Reports
4
Location
IN
IN
190.92.175.228
10/10
Confidence
53%
Reports
22
Location
IN
IN
190.92.174.21
8/10
Confidence
46%
Reports
4
Location
IN
IN
195.250.21.212
10/10
Confidence
38%
Reports
8
Location
IN
IN
69.57.172.96
10/10
Confidence
32%
Reports
22
Location
IN
IN
190.92.174.127
7/10
Confidence
30%
Reports
1
Location
IN
IN
195.250.30.134
7/10
Confidence
29%
Reports
1
Location
IN
IN
190.92.175.38
7/10
Confidence
17%
Reports
1
Location
IN
IN
195.250.31.127
4/10
Confidence
15%
Reports
1
Location
IN
IN
198.38.84.9
7/10
Confidence
12%
Reports
15
Location
IN
IN
IPs from the same subnet range, likely same network segment.
2
Related IPs
8/10
Avg Threat
59%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
278
ISP
Micro Hosting P...
188.241.62.83
8/10
Confidence
100%
Reports
188
ISP
LEAPSWITCH NETW...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
43.230.201.87
8/10
Confidence
100%
Reports
86
ISP
LEAPSWITCH NETW...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
142.93.215.41
8/10
Confidence
100%
Reports
83
ISP
DigitalOcean, LLC
203.192.232.180
10/10
Confidence
100%
Reports
72
ISP
ONEOTT INTERTAI...
122.180.21.11
10/10
Confidence
100%
Reports
67
ISP
Bharti Airtel L...
111.93.186.150
10/10
Confidence
100%
Reports
67
ISP
Tata Teleservic...
45.123.110.70
10/10
Confidence
100%
Reports
66
ISP
WISH NET PRIVAT...
59.97.138.72
10/10
Confidence
100%
Reports
61
ISP
National Intern...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
103.38.219.22
10/10
Confidence
100%
Reports
55
ISP
HEGHESCOM NETWO...
183.82.98.154
8/10
Confidence
100%
Reports
54
ISP
Atria Convergen...
112.196.0.228
8/10
Confidence
100%
Reports
51
ISP
Quadrant Televe...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.149.31
10/10
Confidence
93%
Reports
4,020
Location
NL
NL
45.205.1.5
10/10
Confidence
93%
Reports
2,954
Location
MU
MU
46.151.178.13
8/10
Confidence
93%
Reports
2,754
Location
NL
NL
200.124.160.2
10/10
Confidence
93%
Reports
2,116
Location
MX
MX
80.66.83.43
10/10
Confidence
93%
Reports
1,981
Location
RU
RU
130.12.181.98
8/10
Confidence
93%
Reports
1,224
Location
DE
DE
91.92.240.13
8/10
Confidence
93%
Reports
841
Location
DE
DE
5.83.143.40
10/10
Confidence
93%
Reports
834
Location
NL
NL
160.119.76.4
8/10
Confidence
93%
Reports
820
Location
SC
SC
103.56.148.184
10/10
Confidence
93%
Reports
634
Location
ID
ID
185.224.128.16
10/10
Confidence
93%
Reports
609
Location
NL
NL
185.156.73.157
10/10
Confidence
93%
Reports
525
Location
UA
UA
80.94.95.83
10/10
Confidence
93%
Reports
488
Location
RO
RO
154.239.6.163
8/10
Confidence
93%
Reports
470
Location
EG
EG
87.251.64.149
8/10
Confidence
93%
Reports
462
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203