AS36924 — GVA-Canalbox Threat Intelligence

Network Threat Summary

AS36924 (GVA-Canalbox) has 3,869 malicious IP addresses with 27,647 abuse reports across 9 countries. First activity recorded 2022-10-02, most recent activity 2026-09-20.

Threat Profile: The primary attack categories observed from this network are reconnaissance, aggregated threat, reputation low. This network exhibits moderate threat activity within expected ranges for networks of this size. Affected countries include TG, CI, GA.

Risk Assessment: MEDIUM - Moderate threat activity detected. Regular monitoring with automated blocking for repeat offenders is advised.

Top Attack Categories

• Reconnaissance 7,749 reports
• Aggregated Threat 2,236 reports
• Reputation Low 1,944 reports
• Malware Infrastructure 1,231 reports
• Attacks 658 reports

Top Affected Countries

• TG 8,581 reports
• CI 5,870 reports
• GA 3,517 reports

Most Reported IPs

• 156.38.73.89 532 reports
• 102.64.162.16 455 reports
• 102.64.153.212 453 reports
• 102.64.217.216 359 reports
• 102.67.208.213 357 reports

Lookup an IP or Network

Check any IP address for threat intelligence or browse other ASNs.

Access ASN Intelligence via API

Integrate AS36924 threat data into your security stack with our REST API.

See how we classify and verify threats →