Notable Threat
IP 210.21.46.245 rated 8/10 from 21 verified reports.
Multiple security incidents attributed to this IP. Confidence: 68%.
More threatening than 92% of monitored IPs
IP Address
210.21.46.245
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
China Unicom Guangzhou ne...
ASN 17622
21
Reports
Mixed
Data Source
Threat Categories
SSH
21
Brute-Force
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
2. November 2026
Last Activity
2. November 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 17622) with generally good reputation. The ISP China Unicom Guangzhou network maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
68%
High Confidence
Confidence History
4. Feb 2026 - 2. Nov 2026
68%
Current
Stable
Trend
Security Reports (21)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 210.21.46.245
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
CN
- ASN
- AS17622
- ISP
- China Unicom Guangzhou network
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 21
- First Reported
- 4 Feb 2026
- Last Reported
- 2 Nov 2026, 18:22
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS17622
China Unicom Guangzhou network
CN
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
244
Total IPs Monitored
446
Total Reports
1.8
Reports per IP
Network Context
This IP address belongs to China Unicom Guangzhou network (AS17622), which manages 244 IP addresses in our monitoring system. Out of these, 446 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,313,942 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
21
avg: 7
++
Network Comparison
Compared against 707 IPs in ASN 17622
Threat Level
8/10
network avg: 7.3
=
Total Reports
21
network avg: 2
++
Network China Unicom Guangzhou network has overall threat level 1/10
Geographic Comparison
Compared against 50,265 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
21
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Nov 2026
1 reports
Daily Average
0
reports/day
Most Active
Monday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
21
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
1,197,487 threat incidents tracked globally • Last 24h: 25,263 Logs
FEED
Top Threat Sources
-
01
Brazil260,696 21.8% -
02
United States203,974 17% -
03
India103,085 8.6% -
04
China50,273 4.2%
-
05
Argentina42,337 3.5% -
06
SC29,426 2.5% -
07
Mexico27,810 2.3% -
08
Russia26,831 2.2% -
09
Colombia24,239 2% -
10
Germany23,729 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
41%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
112.94.9.223
8/10
Confidence
68%
Reports
19
Location
CN
CN
112.94.252.46
10/10
Confidence
61%
Reports
33
Location
CN
CN
112.94.253.114
10/10
Confidence
47%
Reports
8
Location
CN
CN
112.94.253.59
10/10
Confidence
45%
Reports
4
Location
CN
CN
112.94.252.156
10/10
Confidence
43%
Reports
5
Location
CN
CN
112.94.253.15
10/10
Confidence
43%
Reports
3
Location
CN
CN
112.94.252.103
10/10
Confidence
40%
Reports
4
Location
CN
CN
112.94.253.238
10/10
Confidence
40%
Reports
3
Location
CN
CN
112.94.253.3
10/10
Confidence
40%
Reports
3
Location
CN
CN
112.94.253.223
10/10
Confidence
40%
Reports
3
Location
CN
CN
112.94.253.164
10/10
Confidence
40%
Reports
3
Location
CN
CN
112.94.252.204
10/10
Confidence
38%
Reports
3
Location
CN
CN
112.94.253.38
10/10
Confidence
37%
Reports
3
Location
CN
CN
112.94.253.192
10/10
Confidence
37%
Reports
3
Location
CN
CN
112.94.253.23
10/10
Confidence
35%
Reports
3
Location
CN
CN
112.94.253.103
10/10
Confidence
35%
Reports
3
Location
CN
CN
112.94.252.178
10/10
Confidence
35%
Reports
3
Location
CN
CN
112.94.253.251
10/10
Confidence
34%
Reports
3
Location
CN
CN
112.94.253.138
7/10
Confidence
34%
Reports
2
Location
CN
CN
112.94.253.174
7/10
Confidence
34%
Reports
2
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
115.191.27.238
10/10
Confidence
100%
Reports
22
ISP
Beijing Volcano...
183.252.199.17
10/10
Confidence
97%
Reports
20
ISP
China Mobile Co...
36.25.251.109
10/10
Confidence
96%
Reports
75
ISP
CT-HangZhou-IDC
8.129.104.206
8/10
Confidence
96%
Reports
48
ISP
Hangzhou Alibab...
58.211.152.4
10/10
Confidence
96%
Reports
40
ISP
Chinanet
202.55.17.42
10/10
Confidence
96%
Reports
39
ISP
CTGNet
116.62.100.25
10/10
Confidence
96%
Reports
39
ISP
Hangzhou Alibab...
120.198.23.233
10/10
Confidence
96%
Reports
39
ISP
China Mobile Co...
122.158.251.10
10/10
Confidence
96%
Reports
39
ISP
CHINA UNICOM Ch...
183.230.9.103
10/10
Confidence
96%
Reports
38
ISP
China Mobile Co...
111.22.163.209
10/10
Confidence
96%
Reports
36
ISP
China Mobile co...
112.26.30.212
10/10
Confidence
96%
Reports
35
ISP
China Mobile Co...
42.203.168.5
10/10
Confidence
96%
Reports
34
ISP
Chinanet
183.134.40.84
10/10
Confidence
96%
Reports
34
ISP
CT-HangZhou-IDC
180.101.184.47
10/10
Confidence
96%
Reports
33
ISP
Chinanet
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
68%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
5.187.38.30
10/10
Confidence
68%
Reports
8
Location
HK
HK
97.95.151.174
10/10
Confidence
68%
Reports
8
Location
US
US
148.113.179.10
10/10
Confidence
68%
Reports
8
Location
CA
CA
83.41.160.98
10/10
Confidence
68%
Reports
8
Location
ES
ES
139.180.223.191
10/10
Confidence
68%
Reports
8
Location
SG
SG
35.210.184.237
10/10
Confidence
68%
Reports
8
Location
BE
BE
35.210.201.136
10/10
Confidence
68%
Reports
8
Location
BE
BE
82.67.209.40
10/10
Confidence
68%
Reports
8
Location
FR
FR
35.236.218.202
10/10
Confidence
68%
Reports
6
Location
US
US
172.98.32.87
10/10
Confidence
68%
Reports
5
Location
US
US
66.132.159.118
10/10
Confidence
68%
Reports
8
Location
US
US
35.210.150.149
10/10
Confidence
68%
Reports
8
Location
BE
BE
91.9.129.57
10/10
Confidence
68%
Reports
8
Location
DE
DE
82.40.63.70
10/10
Confidence
68%
Reports
8
Location
PL
PL
136.70.255.192
10/10
Confidence
68%
Reports
8
Location
US
US