Elevated Risk
Elevated threat level 8/10 for IP 5.253.38.54 from 10 reported incidents.
Behavioral profile indicates cyber threat activity with 92% confidence.
More threatening than 90% of monitored IPs
IP Address
5.253.38.54
IPv4
Public
GB
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
United Kingdom
Location
CNServer LLC
ASN 7488
10
Reports
Honeypot
Data Source
Threat Categories
SSH
10
Brute-Force
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
31. August 2026
Last Activity
10. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 7488, operated by CNServer LLC) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
85%
Verified
Confidence History
29. Jul 2026 - 10. Sep 2026
92%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.253.38.54
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
GB
- ASN
- AS7488
- ISP
- CNServer LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 29 Jul 2026
- Last Reported
- 10 Sep 2026, 12:15
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS7488
CNServer LLC
UA
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
4
Total IPs Monitored
4
Total Reports
1
Reports per IP
Network Context
This IP address belongs to CNServer LLC (AS7488), which manages 4 IP addresses in our monitoring system. Out of these, 4 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,799 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
10
avg: 9
=
Network Comparison
Compared against 28 IPs in ASN 7488
Threat Level
8/10
network avg: 7.3
=
Total Reports
10
network avg: 6
++
Network CNServer LLC has overall threat level 4/10
Geographic Comparison
Compared against 9,306 IPs in GB
Threat Level
8/10
country avg: 6.3
+
Total Reports
10
country avg: 19
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
31 Aug 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Wednesday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
10
Brute-Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
698,370 threat incidents tracked globally • Last 24h: 23,162 Logs
FEED
Top Threat Sources
-
01
United States134,954 19.3% -
02
Brazil109,430 15.7%
-
03
India75,806 10.9%
-
04
China43,125 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,474 2.4%
-
07
Argentina16,068 2.3%
-
08
Germany15,825 2.3%
-
09
Pakistan15,214 2.2%
-
10
Colombia15,077 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.1/10
Avg Threat
58%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
144.225.187.57
10/10
Confidence
100%
Reports
13
Location
US
US
144.225.187.161
10/10
Confidence
98%
Reports
36
Location
US
US
188.255.156.155
10/10
Confidence
96%
Reports
16
Location
RS
RS
144.225.6.161
10/10
Confidence
95%
Reports
10
Location
US
US
5.253.38.188
10/10
Confidence
94%
Reports
19
Location
GB
GB
144.225.187.68
8/10
Confidence
78%
Reports
10
Location
US
US
77.73.14.111
10/10
Confidence
74%
Reports
9
Location
US
US
195.242.178.252
10/10
Confidence
72%
Reports
5
Location
US
US
5.253.38.204
10/10
Confidence
57%
Reports
6
Location
GB
GB
136.0.39.68
8/10
Confidence
56%
Reports
6
Location
US
US
50.114.236.21
7/10
Confidence
46%
Reports
2
Location
US
US
144.225.6.182
10/10
Confidence
44%
Reports
3
Location
US
US
188.255.156.80
7/10
Confidence
40%
Reports
2
Location
RS
RS
46.202.208.50
7/10
Confidence
38%
Reports
1
Location
UA
UA
5.253.38.51
7/10
Confidence
30%
Reports
1
Location
US
US
188.255.156.72
7/10
Confidence
30%
Reports
1
Location
RS
RS
77.73.14.243
7/10
Confidence
30%
Reports
1
Location
US
US
144.225.124.124
7/10
Confidence
30%
Reports
1
Location
US
US
144.225.8.142
7/10
Confidence
30%
Reports
1
Location
US
US
46.202.208.110
0/10
Confidence
30%
Reports
1
Location
UA
UA
IPs from the same subnet range, likely same network segment.
3
Related IPs
9/10
Avg Threat
60%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.196.9.127
8/10
Confidence
100%
Reports
157
ISP
Global-Data Sys...
213.171.208.232
8/10
Confidence
100%
Reports
135
ISP
IONOS SE
167.71.136.93
8/10
Confidence
100%
Reports
124
ISP
DigitalOcean, LLC
62.232.51.140
8/10
Confidence
100%
Reports
107
ISP
Wavenet Limited
209.42.20.53
8/10
Confidence
100%
Reports
89
ISP
WHG Hosting Ser...
167.99.197.34
8/10
Confidence
100%
Reports
78
ISP
DigitalOcean, LLC
109.228.59.224
8/10
Confidence
100%
Reports
76
ISP
IONOS SE
77.68.118.194
10/10
Confidence
100%
Reports
73
ISP
IONOS SE
165.22.116.110
8/10
Confidence
100%
Reports
68
ISP
DigitalOcean, LLC
217.154.45.93
10/10
Confidence
100%
Reports
58
ISP
IONOS SE
178.128.36.92
10/10
Confidence
100%
Reports
57
ISP
DigitalOcean, LLC
188.240.191.168
8/10
Confidence
100%
Reports
55
ISP
ICUK Computing ...
194.74.196.10
10/10
Confidence
100%
Reports
41
ISP
British Telecom...
198.38.94.13
10/10
Confidence
100%
Reports
29
ISP
WHG Hosting Ser...
64.89.160.178
8/10
Confidence
100%
Reports
29
ISP
Ghosty Networks...
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.148.84
10/10
Confidence
92%
Reports
5,669
Location
NL
NL
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
78.142.18.172
8/10
Confidence
92%
Reports
1,735
Location
BG
BG
106.75.186.101
10/10
Confidence
92%
Reports
987
Location
CN
CN
106.75.157.47
10/10
Confidence
92%
Reports
939
Location
CN
CN
106.75.156.189
10/10
Confidence
92%
Reports
935
Location
CN
CN
87.106.98.147
8/10
Confidence
92%
Reports
802
Location
DE
DE
217.160.24.45
8/10
Confidence
92%
Reports
777
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
743
Location
DE
DE
185.132.46.108
8/10
Confidence
92%
Reports
740
Location
DE
DE
77.91.97.123
8/10
Confidence
92%
Reports
708
Location
GE
GE
87.106.189.67
8/10
Confidence
92%
Reports
689
Location
DE
DE
87.106.206.249
8/10
Confidence
92%
Reports
645
Location
DE
DE
87.106.141.148
8/10
Confidence
92%
Reports
535
Location
DE
DE
217.160.24.49
8/10
Confidence
92%
Reports
505
Location
DE
DE
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2