Elevated Risk
IP 207.90.244.26 is a high-risk address associated with sustained hacking activity, with automated honeypot sensors logging 17,627 abuse reports over approximately nine months and assigning it an 8/10 threat level, indicating a prolific and persistent threat to exposed network services.
The IP routes through AS174 (COGENT-174), a major United States backbone provider, with activity first documented in September 2025 and continuing through June 2026. All 20 of the most recent reported threat events categorize the activity as general hacking attempts, including intrusion attempts and exploitation of vulnerable services. The activity frequency rating of 8/10 combined with the extremely high report volume demonstrates continuous, automated scanning and exploitation behavior rather than isolated probes, with a 71% confidence score reflecting reliable detection across multiple sensor types.
Hacking activity encompasses unauthorized access attempts, vulnerability exploitation and intrusion behavior against exposed services. This pattern suggests the address is involved in coordinated scanning campaigns or botnet-assisted attacks targeting internet-facing systems with known weaknesses. The scale of reports indicates this is not a one-time opportunist but an established threat actor systematically probing networks at volume. Services such as SSH, Telnet, RDP or poorly maintained web interfaces face the greatest risk from this type of sustained automated assault.
Site operators should immediately block or rate-limit connections from this address at the firewall level and implement protective measures such as fail2ban to automatically ban repeated offenders. Enforcing strong, unique credentials and disabling unused administrative protocols significantly reduces successful intrusion vectors. Keeping all systems fully patched and deploying network intrusion detection monitoring helps identify attempted exploitation in real time. Regular review of access logs for this IP and similar sources will aid in early detection of ongoing campaigns.
CA 
FR 
HK 
TW 
PE 
GB 
PH