Notable Threat
IP 101.89.182.189 rated 8/10 from 19 verified reports.
Multiple security incidents attributed to this IP. Confidence: 65%.
More threatening than 92% of monitored IPs
IP Address
101.89.182.189
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
China Telecom Group
ASN 4811
19
Reports
Mixed
Data Source
Threat Categories
SSH
18
Hacking
1
Brute-Force
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
19. October 2026
Last Activity
19. October 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 4811) with generally good reputation. The ISP China Telecom Group maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
64%
High Confidence
Confidence History
22. Feb 2026 - 19. Oct 2026
65%
Current
Stable
Trend
Security Reports (19)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 101.89.182.189
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS4811
- ISP
- China Telecom Group
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 19
- First Reported
- 22 Feb 2026
- Last Reported
- 19 Oct 2026, 18:39
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4811
China Telecom Group
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
499
Total IPs Monitored
7,881
Total Reports
15.8
Reports per IP
Network Context
This IP address belongs to China Telecom Group (AS4811), which manages 499 IP addresses in our monitoring system. Out of these, 7,881 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,326,628 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
19
avg: 7
++
Network Comparison
Compared against 693 IPs in ASN 4811
Threat Level
8/10
network avg: 8.3
=
Total Reports
19
network avg: 16
+
Network China Telecom Group has overall threat level 2/10
Geographic Comparison
Compared against 50,929 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
19
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 Oct 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Monday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
18
Brute-Force
1
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 20:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,209,278 threat incidents tracked globally • Last 24h: 33,246 Logs
FEED
Top Threat Sources
-
01
Brazil261,018 21.6% -
02
United States206,767 17.1% -
03
India103,488 8.6% -
04
China50,929 4.2%
-
05
Argentina42,402 3.5% -
06
SC29,446 2.4% -
07
Mexico27,913 2.3% -
08
Russia26,975 2.2% -
09
Germany24,354 2% -
10
Colombia24,267 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
90%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
121.46.244.19
10/10
Confidence
96%
Reports
26
Location
CN
CN
121.46.244.22
10/10
Confidence
96%
Reports
18
Location
CN
CN
218.78.83.129
10/10
Confidence
94%
Reports
36
Location
CN
CN
121.46.244.21
10/10
Confidence
94%
Reports
24
Location
CN
CN
121.46.244.20
10/10
Confidence
94%
Reports
20
Location
CN
CN
14.103.115.181
10/10
Confidence
93%
Reports
15
Location
CN
CN
14.103.47.224
10/10
Confidence
92%
Reports
14
Location
CN
CN
118.196.34.237
10/10
Confidence
91%
Reports
25
Location
CN
CN
121.46.244.23
10/10
Confidence
91%
Reports
21
Location
CN
CN
114.80.39.74
10/10
Confidence
89%
Reports
20
Location
CN
CN
101.89.141.184
10/10
Confidence
88%
Reports
477
Location
CN
CN
14.103.117.84
10/10
Confidence
88%
Reports
23
Location
CN
CN
118.196.118.181
10/10
Confidence
88%
Reports
12
Location
CN
CN
14.103.118.140
10/10
Confidence
87%
Reports
20
Location
CN
CN
118.196.16.16
10/10
Confidence
87%
Reports
15
Location
CN
CN
101.89.76.249
10/10
Confidence
86%
Reports
31
Location
CN
CN
14.103.118.61
10/10
Confidence
86%
Reports
24
Location
CN
CN
118.196.36.59
8/10
Confidence
85%
Reports
50
Location
CN
CN
14.103.115.182
10/10
Confidence
85%
Reports
23
Location
CN
CN
14.103.110.123
10/10
Confidence
85%
Reports
16
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.25.55.5
8/10
Confidence
98%
Reports
12
ISP
China Mobile co...
36.25.251.109
10/10
Confidence
96%
Reports
82
ISP
CT-HangZhou-IDC
8.129.104.206
8/10
Confidence
96%
Reports
48
ISP
Hangzhou Alibab...
58.211.152.4
10/10
Confidence
96%
Reports
44
ISP
Chinanet
120.198.23.233
10/10
Confidence
96%
Reports
43
ISP
China Mobile Co...
183.230.9.103
10/10
Confidence
96%
Reports
42
ISP
China Mobile Co...
202.55.17.42
10/10
Confidence
96%
Reports
39
ISP
CTGNet
116.62.100.25
10/10
Confidence
96%
Reports
39
ISP
Hangzhou Alibab...
111.22.163.209
10/10
Confidence
96%
Reports
39
ISP
China Mobile co...
112.26.30.212
10/10
Confidence
96%
Reports
39
ISP
China Mobile Co...
122.158.251.10
10/10
Confidence
96%
Reports
39
ISP
CHINA UNICOM Ch...
42.203.168.5
10/10
Confidence
96%
Reports
38
ISP
Chinanet
42.203.168.4
10/10
Confidence
96%
Reports
35
ISP
Chinanet
180.101.184.47
10/10
Confidence
96%
Reports
35
ISP
Chinanet
36.152.25.50
8/10
Confidence
96%
Reports
33
ISP
China Mobile co...
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
65%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
52.23.168.237
10/10
Confidence
65%
Reports
9
Location
US
US
144.217.61.131
10/10
Confidence
65%
Reports
4
Location
CA
CA
162.43.244.190
6/10
Confidence
65%
Reports
12
Location
US
US
203.109.60.101
6/10
Confidence
65%
Reports
11
Location
US
US
47.251.140.21
10/10
Confidence
65%
Reports
18
Location
US
US
47.91.75.137
10/10
Confidence
65%
Reports
15
Location
DE
DE
165.154.46.36
10/10
Confidence
65%
Reports
7
Location
HK
HK
209.139.109.41
6/10
Confidence
65%
Reports
12
Location
US
US
154.36.72.130
6/10
Confidence
65%
Reports
15
Location
US
US
162.222.197.0
6/10
Confidence
65%
Reports
14
Location
US
US
81.199.26.100
10/10
Confidence
65%
Reports
131
Location
DE
DE
38.130.145.154
8/10
Confidence
65%
Reports
55
Location
IN
IN
37.19.200.166
8/10
Confidence
65%
Reports
18
Location
US
US
47.254.87.150
10/10
Confidence
65%
Reports
16
Location
US
US
8.216.10.184
8/10
Confidence
65%
Reports
19
Location
JP
JP