Critical Alert
Security alert: 94.136.186.48 rated 10/10 based on 4 verified incidents.
Threat profile indicates sustained malicious activity with 42% confidence rating.
More threatening than 97% of monitored IPs
IP Address
94.136.186.48
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
India
Location
Contabo Asia Private Limi...
ASN 141995
4
Reports
Honeypot
Data Source
Threat Categories
WP Plugin Exploit
2
WP Plugin Scanning
2
Hacking
2
WP Media Library Abuse
1
Web App Attack
1
Indiscriminate Scan
1
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
10. September 2026
Last Activity
16. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 141995, operated by Contabo Asia Private Limited) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
41%
Medium Confidence
Confidence History
10. Sep 2026 - 16. Sep 2026
42%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Media Library Abuse WP Plugin Exploit WP Plugin Scanning | Honeypot x5 | 75% | |
| Web App Attack Indiscriminate Scan WP Plugin Exploit +1 | Honeypot x4 | 75% | |
| Port Scan Hacking WP Config Exposure +5 | Honeypot x6 | 75% | |
| SSH Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 94.136.186.48
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS141995
- ISP
- Contabo Asia Private Limited
DNS Information
- Reverse DNS
- vmi2976941.contaboserver.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 4
- First Reported
- 10 Sep 2026
- Last Reported
- 16 Sep 2026, 10:01
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS141995
Contabo Asia Private Limited
JP
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
119
Total IPs Monitored
1,618
Total Reports
13.6
Reports per IP
Network Context
This IP address belongs to Contabo Asia Private Limited (AS141995), which manages 119 IP addresses in our monitoring system. Out of these, 1,618 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 831,747 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
4
avg: 9
--
Network Comparison
Compared against 316 IPs in ASN 141995
Threat Level
10/10
network avg: 7.5
+
Total Reports
4
network avg: 6
-
Network Contabo Asia Private Limited has overall threat level 4/10
Geographic Comparison
Compared against 87,065 IPs in IN
Threat Level
10/10
country avg: 6.6
++
Total Reports
4
country avg: 3
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
16 Sep 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
2
WP Plugin Exploit
2
WP Plugin Scanning
2
SSH
1
Port Scan
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
756,109 threat incidents tracked globally • Last 24h: 28,868 Logs
FEED
Top Threat Sources
-
01
United States147,903 19.6% -
02
Brazil111,781 14.8%
-
03
India87,067 11.5%
-
04
China46,034 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,332 2.4%
-
07
Netherlands17,954 2.4%
-
08
Pakistan17,776 2.4%
-
09
Argentina16,264 2.2%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.8/10
Avg Threat
47%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
147.93.172.115
10/10
Confidence
76%
Reports
9
Location
SG
SG
80.65.208.138
10/10
Confidence
68%
Reports
8
Location
IN
IN
2407:3640:2344:9556::1
10/10
Confidence
62%
Reports
5
Location
SG
SG
147.93.158.45
10/10
Confidence
62%
Reports
5
Location
SG
SG
194.233.71.230
8/10
Confidence
56%
Reports
5
Location
SG
SG
82.197.69.56
7/10
Confidence
53%
Reports
19
Location
SG
SG
2407:3640:2354:9749::1
10/10
Confidence
48%
Reports
5
Location
SG
SG
217.216.110.186
8/10
Confidence
47%
Reports
4
Location
DE
DE
82.180.147.135
10/10
Confidence
47%
Reports
3
Location
IN
IN
2400:d321:2297:6941::1
10/10
Confidence
45%
Reports
3
Location
IN
IN
109.123.239.174
10/10
Confidence
43%
Reports
4
Location
SG
SG
147.93.172.9
10/10
Confidence
42%
Reports
4
Location
SG
SG
2400:d321:2301:9872::1
10/10
Confidence
41%
Reports
4
Location
IN
IN
2407:3640:2350:4488::1
10/10
Confidence
40%
Reports
38
Location
SG
SG
217.216.38.202
7/10
Confidence
40%
Reports
5
Location
SG
SG
217.216.38.203
7/10
Confidence
37%
Reports
4
Location
SG
SG
217.216.38.205
7/10
Confidence
36%
Reports
4
Location
SG
SG
217.216.38.212
7/10
Confidence
35%
Reports
5
Location
SG
SG
62.146.232.110
7/10
Confidence
34%
Reports
2
Location
SG
SG
217.216.38.208
7/10
Confidence
31%
Reports
3
Location
SG
SG
IPs from the same subnet range, likely same network segment.
3
Related IPs
8/10
Avg Threat
1%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
160.187.54.114
10/10
Confidence
100%
Reports
139
ISP
Imegh Private L...
69.57.172.119
8/10
Confidence
100%
Reports
73
ISP
WHG Hosting Ser...
103.47.15.110
10/10
Confidence
100%
Reports
62
ISP
Precious netcom...
103.130.90.169
10/10
Confidence
100%
Reports
51
ISP
Skylink Fiberne...
103.170.157.62
10/10
Confidence
100%
Reports
49
ISP
Airline Interne...
139.59.83.112
10/10
Confidence
100%
Reports
35
ISP
DigitalOcean, LLC
202.176.1.225
10/10
Confidence
100%
Reports
32
ISP
RailTel Corpora...
103.192.199.245
10/10
Confidence
100%
Reports
30
ISP
NEEVAI SUPERCLO...
121.242.232.147
10/10
Confidence
100%
Reports
28
ISP
TATA Communicat...
183.82.103.178
8/10
Confidence
100%
Reports
27
ISP
Atria Convergen...
14.96.50.90
8/10
Confidence
100%
Reports
24
ISP
Tata Teleservic...
106.51.93.11
8/10
Confidence
100%
Reports
24
ISP
Atria Convergen...
182.70.255.242
10/10
Confidence
100%
Reports
24
ISP
Bharti Airtel L...
103.58.64.209
10/10
Confidence
100%
Reports
23
ISP
INFONET COMM EN...
122.168.197.138
10/10
Confidence
100%
Reports
22
ISP
Bharti Airtel L...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
42%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
144.123.77.105
10/10
Confidence
42%
Reports
3
Location
CN
CN
196.136.147.62
10/10
Confidence
42%
Reports
3
Location
EG
EG
106.213.187.147
10/10
Confidence
42%
Reports
3
Location
IN
IN
173.244.32.19
10/10
Confidence
42%
Reports
6
Location
DO
DO
103.191.123.151
10/10
Confidence
42%
Reports
3
Location
PK
PK
2401:4900:881a:da7b:7ddf:93f3:8200:7e1
10/10
Confidence
42%
Reports
3
Location
IN
IN
223.185.59.41
10/10
Confidence
42%
Reports
3
Location
IN
IN
2.71.53.84
10/10
Confidence
42%
Reports
4
Location
SE
SE
117.248.26.57
10/10
Confidence
42%
Reports
3
Location
IN
IN
2402:4000:b201:1778:1db:9da5:3739:b055
10/10
Confidence
42%
Reports
3
Location
LK
LK
197.219.39.78
10/10
Confidence
42%
Reports
3
Location
MZ
MZ
86.99.222.109
10/10
Confidence
42%
Reports
3
Location
AE
AE
2405:201:4057:480a:70ab:73f2:ea51:69e4
10/10
Confidence
42%
Reports
3
Location
IN
IN
154.242.153.215
10/10
Confidence
42%
Reports
3
Location
DZ
DZ
103.191.123.100
10/10
Confidence
42%
Reports
3
Location
PK
PK