← Back to Dashboard

178.248.236.209 Threat Intelligence Report

Risk Level: CRITICAL — 91 abuse reports from 7 sources

Threat Intelligence Summary

IP address 178.248.236.209 has been flagged in 91 abuse reports across 7 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is abuseipdb blacklist, along with aggregated threat, known malicious, malware c2, port scan, reconnaissance, reputation low.

This IP is geolocated in Russia and belongs to the network HLL LLC (AS51115). Reports span from 2026-09-03 to 2026-09-23.

Assessment: Despite a lower report volume, the severity and nature of activity from 178.248.236.209 has triggered critical-level alerts across our threat detection network. Systematic port scanning activity from this IP indicates active reconnaissance of internet-facing services, typically a precursor to targeted exploitation.

Data aggregated from 7 independent threat intelligence sources.

Geolocation

Country Russia
ISP/ASN HLL LLC
Timezone Europe/Moscow

Threat Status

Overall Status Critical
Threat Score 100.0%
Report Count 91
Sources 7
First Seen 2026-09-03
Last Seen 2026-09-23
AI Analysis

Check IPs automatically with the WAYSCloud API

Free tier: 1,000 lookups/day. Get threat scores, geolocation, and abuse reports via REST API.

Explore the API →

See how we classify and verify threats →

Related Intelligence

Russia Threat Intelligence → AS51115 Network Intelligence → See all top malicious IPs → View latest attacks →
Learn about these threats: