Elevated Risk
Elevated threat level 7/10 for IP 103.203.59.3 from 29 reported incidents.
Behavioral profile indicates cyber threat activity with 95% confidence.
More threatening than 85% of monitored IPs
IP Address
103.203.59.3
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
Beijing Tiantexin Tech. C...
ASN 136180
29
Reports
Mixed
Data Source
Threat Categories
Port Scan
27
Hacking
27
Bad Web Bot
1
Technical Details
Port scanning identifies open services and potential attack vectors on target systems as reconnaissance for attacks.
Recommended Mitigations
Minimize exposed services, implement firewall rules, and monitor for scanning patterns.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
2. September 2026
Last Activity
30. September 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 136180) with generally good reputation. The ISP Beijing Tiantexin Tech. Co., Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
7/10
High
Confidence Score
95%
Verified
Confidence History
19. Aug 2025 - 30. Sep 2026
95%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Port Scan Hacking | Honeypot x2 | 75% |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Port Scan Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking Port Scan | Honeypot x2 | 75% | |
| Bad Web Bot | Community | 75% |
Technical Details
Basic Information
- IP Address
- 103.203.59.3
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS136180
- ISP
- Beijing Tiantexin Tech. Co., Ltd.
DNS Information
- Reverse DNS
- scan-59-3.security.ipip.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 19 Aug 2025
- Last Reported
- 30 Sep 2026, 17:24
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS136180
Beijing Tiantexin Tech. Co., Ltd.
CN
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
19
Total IPs Monitored
745
Total Reports
39.2
Reports per IP
Network Context
This IP address belongs to Beijing Tiantexin Tech. Co., Ltd. (AS136180), which manages 19 IP addresses in our monitoring system. Out of these, 745 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 806,268 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
29
avg: 9
++
Network Comparison
Compared against 21 IPs in ASN 136180
Threat Level
7/10
network avg: 9.1
-
Total Reports
29
network avg: 56
-
Network Beijing Tiantexin Tech. Co., Ltd. has overall threat level 1/10
Geographic Comparison
Compared against 44,742 IPs in CN
Threat Level
7/10
country avg: 7.4
=
Total Reports
29
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Sep 2026
1 reports
Daily Average
0.4
reports/day
Most Active
Sunday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
4/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
27
Port Scan
27
Bad Web Bot
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
733,188 threat incidents tracked globally • Last 24h: 28,825 Logs
FEED
Top Threat Sources
-
01
United States143,190 19.5% -
02
Brazil110,727 15.1%
-
03
India82,109 11.2%
-
04
China44,727 6.1%
-
05
SC29,233 4%
-
06
Germany17,474 2.4%
-
07
Netherlands17,459 2.4%
-
08
Pakistan16,628 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
50%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.203.59.16
7/10
Confidence
96%
Reports
14
Location
CN
CN
103.203.59.9
10/10
Confidence
94%
Reports
17
Location
CN
CN
103.203.57.3
8/10
Confidence
76%
Reports
66
Location
CN
CN
103.203.57.28
8/10
Confidence
75%
Reports
143
Location
CN
CN
103.203.57.2
10/10
Confidence
75%
Reports
106
Location
CN
CN
103.203.58.4
10/10
Confidence
74%
Reports
48
Location
CN
CN
103.203.57.26
10/10
Confidence
73%
Reports
49
Location
CN
CN
103.203.57.18
10/10
Confidence
72%
Reports
44
Location
CN
CN
103.203.57.20
10/10
Confidence
69%
Reports
54
Location
CN
CN
103.203.57.11
10/10
Confidence
68%
Reports
73
Location
CN
CN
103.203.58.3
10/10
Confidence
63%
Reports
19
Location
CN
CN
103.203.56.2
8/10
Confidence
63%
Reports
10
Location
CN
CN
103.203.59.1
8/10
Confidence
60%
Reports
71
Location
CN
CN
103.203.56.1
8/10
Confidence
38%
Reports
15
Location
CN
CN
103.203.56.3
8/10
Confidence
3%
Reports
4
Location
CN
CN
103.203.59.7
10/10
Confidence
0%
Reports
296
Location
CN
CN
103.203.59.5
10/10
Confidence
0%
Reports
71
Location
CN
CN
103.203.59.17
10/10
Confidence
0%
Reports
30
Location
CN
CN
103.203.59.12
10/10
Confidence
0%
Reports
8
Location
CN
CN
103.203.57.19
10/10
Confidence
0%
Reports
5
Location
CN
CN
IPs from the same subnet range, likely same network segment.
7
Related IPs
9.3/10
Avg Threat
36%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
103.203.59.16
7/10
Confidence
96%
Reports
14
Location
CN
CN
103.203.59.9
10/10
Confidence
94%
Reports
17
Location
CN
CN
103.203.59.1
8/10
Confidence
60%
Reports
71
Location
CN
CN
103.203.59.7
10/10
Confidence
0%
Reports
296
Location
CN
CN
103.203.59.5
10/10
Confidence
0%
Reports
71
Location
CN
CN
103.203.59.17
10/10
Confidence
0%
Reports
30
Location
CN
CN
103.203.59.12
10/10
Confidence
0%
Reports
8
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
202.101.144.44
10/10
Confidence
100%
Reports
16
ISP
Chinanet
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
222.220.102.32
10/10
Confidence
100%
Reports
12
ISP
Chinanet
203.56.198.45
10/10
Confidence
99%
Reports
26
ISP
Sichuan Chuanxn...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
112.123.228.180
10/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
101.96.214.98
10/10
Confidence
98%
Reports
14
ISP
Beijing Volcano...
118.196.119.108
8/10
Confidence
98%
Reports
12
ISP
China Telecom (...
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.196.152.49
10/10
Confidence
95%
Reports
154
Location
FR
FR
77.90.185.20
8/10
Confidence
95%
Reports
154
Location
IR
IR
91.196.152.229
10/10
Confidence
95%
Reports
148
Location
FR
FR
91.196.152.64
10/10
Confidence
95%
Reports
135
Location
FR
FR
91.196.152.156
10/10
Confidence
95%
Reports
132
Location
FR
FR
111.160.133.62
8/10
Confidence
95%
Reports
94
Location
CN
CN
41.111.198.172
8/10
Confidence
95%
Reports
78
Location
DZ
DZ
77.68.118.194
10/10
Confidence
95%
Reports
73
Location
GB
GB
113.23.225.9
10/10
Confidence
95%
Reports
67
Location
MY
MY
49.0.3.142
10/10
Confidence
95%
Reports
66
Location
ID
ID
41.111.187.130
10/10
Confidence
95%
Reports
62
Location
DZ
DZ
133.18.142.16
10/10
Confidence
95%
Reports
60
Location
JP
JP
82.147.142.205
10/10
Confidence
95%
Reports
59
Location
BG
BG
67.206.199.61
10/10
Confidence
95%
Reports
54
Location
PR
PR
103.226.242.125
10/10
Confidence
95%
Reports
53
Location
IN
IN