Elevated Risk
IP 5.187.35.26 is a high-risk address with a threat level of 8 out of 10, associated with sustained general hacking activity including intrusion attempts, vulnerability exploitation, and unauthorized access attempts against exposed services. The volume and consistency of malicious traffic from this source demand immediate defensive attention.
This IP address originates from the Netherlands and is routed through AS206264, operated by Amarutu Technology Ltd. The address has generated 2,281 abuse reports with a confidence score of 89%, making it one of the most actively reported sources in recent months. Detection occurred exclusively through automated honeypot sensors, which logged activity across an approximately five-month window from March 2026 through July 2026. The activity frequency rating of 8 out of 10 indicates continuous, high-volume malicious traffic rather than isolated scanning probes.
The dominant threat category of general hacking encompasses a broad spectrum of unauthorized access attempts, including exploitation of known vulnerabilities, authentication brute-forcing, and probing for misconfigured or outdated services. With over two thousand reports spanning several months, this activity pattern suggests an automated, infrastructure-based campaign rather than opportunistic individual scanning. The elevated confidence score of 89% reflects substantial corroborating evidence across multiple detection sensors.
Administrators should implement immediate defensive measures including firewall blocks or strict rate-limiting for this source address, review authentication logs for matching connection patterns, and consider deploying automated blocking tools such as fail2ban to prevent repeated login attempts. Systems should be kept fully patched, unnecessary services should be disabled to reduce attack surface, and monitoring should be heightened for any authentication anomalies from this IP range.
SC 
BG 
UA