Significant Threat
IP 45.204.209.224 identified as significant threat (8/10) from 33 events.
Multiple malicious indicators detected. Confidence level: 74%.
More threatening than 80% of monitored IPs
IP Address
45.204.209.224
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
HK
Location
HKCLOUDX
ASN 62468
33
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 62468) with generally good reputation. The ISP HKCLOUDX maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
69%
High Confidence
Confidence History
27. Feb 2026 - 18. Mar 2026
74%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 45.204.209.224
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
HK
- ASN
- AS62468
- ISP
- HKCLOUDX
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 33
- First Reported
- 27 Feb 2026
- Last Reported
- 18 Mar 2026, 06:42
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS62468
VpsQuan L.L.C.
SC
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
18
Total IPs Monitored
396
Total Reports
22
Reports per IP
Network Context
This IP address belongs to VpsQuan L.L.C. (AS62468), which manages 18 IP addresses in our monitoring system. Out of these, 396 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
80
%
Global Threat Ranking
This IP is more threatening than 80% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,742 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
33
avg: 23
+
Network Comparison
Compared against 22 IPs in ASN 62468
Threat Level
8/10
network avg: 4.9
++
Total Reports
33
network avg: 19
++
Network HKCLOUDX has overall threat level 2/10
Geographic Comparison
Compared against 2,682 IPs in HK
Threat Level
8/10
country avg: 6.1
+
Total Reports
33
country avg: 45
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
33
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
4.7/10
Avg Threat
34%
Avg Confidence
8
High Threat
Elevated risk: Multiple related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
68
Location
SC
SC
156.239.253.250
8/10
Confidence
77%
Reports
5
Location
SC
SC
156.245.248.226
10/10
Confidence
68%
Reports
141
Location
HK
HK
45.204.212.123
10/10
Confidence
62%
Reports
142
Location
HK
HK
23.251.34.79
8/10
Confidence
48%
Reports
3
Location
US
US
69.165.67.17
8/10
Confidence
30%
Reports
3
Location
HK
HK
69.165.72.109
0/10
Confidence
30%
Reports
1
Location
HK
HK
156.239.240.2
0/10
Confidence
30%
Reports
1
Location
SC
SC
107.151.233.138
7/10
Confidence
29%
Reports
1
Location
US
US
43.250.173.180
7/10
Confidence
29%
Reports
1
Location
HK
HK
156.245.246.6
6/10
Confidence
28%
Reports
1
Location
SC
SC
45.204.209.45
0/10
Confidence
23%
Reports
2
Location
HK
HK
45.204.209.185
0/10
Confidence
23%
Reports
2
Location
HK
HK
156.245.246.168
0/10
Confidence
23%
Reports
2
Location
SC
SC
69.165.67.22
0/10
Confidence
23%
Reports
2
Location
HK
HK
45.204.209.80
0/10
Confidence
23%
Reports
2
Location
HK
HK
45.204.209.253
2/10
Confidence
8%
Reports
1
Location
HK
HK
156.245.246.131
6/10
Confidence
6%
Reports
2
Location
SC
SC
45.204.209.102
6/10
Confidence
6%
Reports
1
Location
HK
HK
156.245.246.112
6/10
Confidence
6%
Reports
1
Location
SC
SC
IPs from the same subnet range, likely same network segment.
5
Related IPs
1.6/10
Avg Threat
17%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
65.52.167.153
8/10
Confidence
100%
Reports
79
ISP
MICROSOFT-CORP-...
165.154.41.13
7/10
Confidence
100%
Reports
79
ISP
ZEN-DPS
165.154.22.6
8/10
Confidence
100%
Reports
52
ISP
UCLOUD INFORMAT...
119.28.9.170
10/10
Confidence
100%
Reports
51
ISP
Tencent Buildin...
45.249.246.120
8/10
Confidence
100%
Reports
51
ISP
UCLOUD INFORMAT...
165.154.6.26
10/10
Confidence
100%
Reports
49
ISP
UCLOUD INFORMAT...
152.32.130.174
10/10
Confidence
100%
Reports
47
ISP
UCLOUD INFORMAT...
165.154.6.104
10/10
Confidence
100%
Reports
41
ISP
UCLOUD INFORMAT...
152.32.130.144
10/10
Confidence
100%
Reports
38
ISP
UCLOUD INFORMAT...
103.106.188.32
10/10
Confidence
100%
Reports
37
ISP
cognetcloud INC
165.154.5.148
10/10
Confidence
100%
Reports
33
ISP
UCLOUD INFORMAT...
152.32.213.101
8/10
Confidence
100%
Reports
26
ISP
UCLOUD INFORMAT...
144.48.243.18
10/10
Confidence
100%
Reports
21
ISP
Overcasts Limited
154.83.13.181
10/10
Confidence
100%
Reports
21
ISP
YISU CLOUD LTD
165.154.23.26
10/10
Confidence
100%
Reports
19
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
74%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.30
10/10
Confidence
74%
Reports
27,371
Location
BG
BG
147.45.50.147
10/10
Confidence
74%
Reports
3,671
Location
NL
NL
92.63.197.59
8/10
Confidence
74%
Reports
2,582
Location
UA
UA
92.63.197.92
8/10
Confidence
74%
Reports
2,461
Location
UA
UA
45.148.10.196
10/10
Confidence
74%
Reports
2,216
Location
NL
NL
165.232.68.36
8/10
Confidence
74%
Reports
1,256
Location
DE
DE
80.94.92.64
10/10
Confidence
74%
Reports
1,206
Location
RO
RO
185.246.130.20
10/10
Confidence
74%
Reports
1,137
Location
SE
SE
103.252.88.228
8/10
Confidence
74%
Reports
1,077
Location
DE
DE
80.94.92.65
10/10
Confidence
74%
Reports
904
Location
RO
RO
80.94.92.70
10/10
Confidence
74%
Reports
895
Location
RO
RO
80.94.92.69
10/10
Confidence
74%
Reports
795
Location
RO
RO
89.42.231.182
8/10
Confidence
74%
Reports
603
Location
NL
NL
152.32.253.152
10/10
Confidence
74%
Reports
601
Location
HK
HK
91.231.89.81
10/10
Confidence
74%
Reports
559
Location
FR
FR
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203