Extreme Threat
IP 45.148.10.196 is a critical-risk address associated with sustained hacking activity, including SSH intrusion attempts detected by automated honeypot sensors, with a substantial volume of 2,216 abuse reports filed against this single Netherlands-based host over approximately eight months.
Network intelligence places 45.148.10.196 within AS48090 operated by Techoff Srv Limited in the Netherlands, a network that has generated significant abuse telemetry since its first reported appearance in August 2025 through March 2026. All 20 most recent threat reports categorise the activity as general hacking, with a Suricata intrusion-detection signature flagging active SSH sessions established on non-standard ports — a known technique for evading default firewall rules and signature-based monitoring. Despite the extremely high threat-level score of 10 out of 10, the current activity frequency registers at zero, suggesting either deliberate operational pauses or successful defensive blocking by targeted networks, though the historical volume indicates persistent, repeated targeting over an extended period.
The dominant threat category — hacking activity centred on SSH manipulation — represents a concrete intrusion risk for any exposed service. Attackers leveraging non-standard SSH port placement attempt to bypass automated scanning that targets port 22 exclusively, potentially preceding credential brute-forcing, lateral movement, or deployment of persistent backdoors. With 2,216 independent reports accumulated across automated sensors, this address demonstrates a sustained, systematic approach to compromising network access rather than opportunistic or transient scanning.
Site operators should treat any connection attempt from 45.148.10.196 as malicious and block the address at the network perimeter. Enforcing key-based SSH authentication exclusively, relocating the SSH service to a non-standard port, and implementing fail2ban or similar dynamic blocking tools to throttle repeated authentication failures will substantially reduce exposure. Maintaining strict patch management for SSH daemons and enforcing IP allowlisting where feasible provides additional defence-in-depth against the exploitation patterns this address has historically employed.
BG 
UA 
MX 
RO 
FR