Extreme Threat
IP 103.30.65.221 classified at threat level 10/10 with 10 documented attacks.
Advanced threat indicators confirmed with 52% certainty.
More threatening than 99% of monitored IPs
IP Address
103.30.65.221
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
IN
Location
RailTel Corporation of In...
ASN 24186
10
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
10
Hacking
3
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
9. November 2026
Last Activity
9. November 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 24186) with generally good reputation. The ISP RailTel Corporation of India Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
52%
High Confidence
Confidence History
18. Oct 2025 - 9. Nov 2026
52%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.30.65.221
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS24186
- ISP
- RailTel Corporation of India Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 18 Oct 2025
- Last Reported
- 9 Nov 2026, 18:47
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24186
RailTel Corporation of India Ltd
IN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
57
Total IPs Monitored
1,340
Total Reports
23.5
Reports per IP
Network Context
This IP address belongs to RailTel Corporation of India Ltd (AS24186), which manages 57 IP addresses in our monitoring system. Out of these, 1,340 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,350,527 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
10
avg: 7
+
Network Comparison
Compared against 2,041 IPs in ASN 24186
Threat Level
10/10
network avg: 6.7
+
Total Reports
10
network avg: 3
++
Network RailTel Corporation of India Ltd has overall threat level 2/10
Geographic Comparison
Compared against 104,089 IPs in IN
Threat Level
10/10
country avg: 6.6
++
Total Reports
10
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Nov 2026
1 reports
Daily Average
0
reports/day
Most Active
Saturday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
10
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
1,230,882 threat incidents tracked globally • Last 24h: 21,390 Logs
FEED
Top Threat Sources
-
01
Brazil261,690 21.3% -
02
United States213,208 17.3% -
03
India104,089 8.5%
-
04
China52,396 4.3% -
05
Argentina42,598 3.5% -
06
SC29,480 2.4% -
07
Mexico28,133 2.3% -
08
Russia27,394 2.2% -
09
Germany25,648 2.1% -
10
Colombia24,354 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
45%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
122.252.241.175
10/10
Confidence
74%
Reports
15
Location
IN
IN
103.61.72.16
8/10
Confidence
66%
Reports
23
Location
IN
IN
202.21.44.159
10/10
Confidence
51%
Reports
9
Location
IN
IN
202.141.1.114
10/10
Confidence
51%
Reports
6
Location
IN
IN
202.141.36.155
8/10
Confidence
49%
Reports
9
Location
IN
IN
144.16.3.74
10/10
Confidence
49%
Reports
9
Location
IN
IN
103.15.253.163
10/10
Confidence
47%
Reports
8
Location
IN
IN
112.133.211.10
8/10
Confidence
44%
Reports
6
Location
IN
IN
103.197.113.122
10/10
Confidence
43%
Reports
8
Location
IN
IN
202.141.83.77
8/10
Confidence
43%
Reports
6
Location
IN
IN
202.176.1.225
10/10
Confidence
42%
Reports
32
Location
IN
IN
112.133.239.116
10/10
Confidence
42%
Reports
9
Location
IN
IN
112.133.239.125
10/10
Confidence
40%
Reports
8
Location
IN
IN
202.141.67.37
10/10
Confidence
40%
Reports
6
Location
IN
IN
202.141.8.255
7/10
Confidence
39%
Reports
12
Location
IN
IN
103.199.207.37
8/10
Confidence
39%
Reports
5
Location
IN
IN
202.141.32.195
10/10
Confidence
38%
Reports
14
Location
IN
IN
112.133.204.98
10/10
Confidence
37%
Reports
6
Location
IN
IN
2401:b200:203a:864f:bd32:463d:5289:8d12
10/10
Confidence
37%
Reports
4
Location
IN
IN
112.133.255.169
8/10
Confidence
36%
Reports
9
Location
IN
IN
IPs from the same subnet range, likely same network segment.
4
Related IPs
7.5/10
Avg Threat
12%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
203.145.165.2
10/10
Confidence
96%
Reports
55
ISP
Bharti Airtel L...
113.11.231.104
10/10
Confidence
96%
Reports
35
ISP
Krishna Raghava...
4.240.100.218
10/10
Confidence
96%
Reports
35
ISP
Microsoft Corpo...
121.242.232.216
10/10
Confidence
96%
Reports
23
ISP
TATA Communicat...
122.165.56.162
10/10
Confidence
95%
Reports
25
ISP
Bharti Airtel L...
13.234.214.153
10/10
Confidence
94%
Reports
77
ISP
Amazon.com, Inc.
103.154.233.221
10/10
Confidence
94%
Reports
49
ISP
Netclues Techno...
121.242.232.147
10/10
Confidence
94%
Reports
48
ISP
TATA Communicat...
141.148.207.84
10/10
Confidence
94%
Reports
48
ISP
Oracle Corporation
168.138.112.29
10/10
Confidence
94%
Reports
29
ISP
Oracle Corporation
122.165.162.117
10/10
Confidence
94%
Reports
19
ISP
Bharti Airtel L...
182.48.206.84
10/10
Confidence
94%
Reports
14
ISP
D-Vois Broadban...
103.174.103.177
10/10
Confidence
93%
Reports
5,367
ISP
IDIGITALCAMP WE...
103.113.160.247
10/10
Confidence
93%
Reports
2,846
ISP
KUDOSHUB TECHNO...
103.51.116.158
10/10
Confidence
93%
Reports
218
ISP
Primesoftex Ltd
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
52%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
168.81.73.239
10/10
Confidence
52%
Reports
4
Location
IN
IN
35.198.227.195
10/10
Confidence
52%
Reports
5
Location
SG
SG
34.47.33.47
10/10
Confidence
52%
Reports
5
Location
CA
CA
103.91.128.111
10/10
Confidence
52%
Reports
6
Location
BD
BD
103.91.128.103
10/10
Confidence
52%
Reports
6
Location
BD
BD
143.110.217.101
10/10
Confidence
52%
Reports
5
Location
CA
CA
125.104.48.208
10/10
Confidence
52%
Reports
5
Location
CN
CN
207.148.85.209
10/10
Confidence
52%
Reports
5
Location
AU
AU
34.88.190.239
10/10
Confidence
52%
Reports
6
Location
FI
FI
34.88.50.197
10/10
Confidence
52%
Reports
6
Location
FI
FI
174.138.29.171
10/10
Confidence
52%
Reports
5
Location
SG
SG
152.42.199.59
10/10
Confidence
52%
Reports
5
Location
SG
SG
35.185.244.199
10/10
Confidence
52%
Reports
5
Location
US
US
125.166.143.203
10/10
Confidence
52%
Reports
5
Location
ID
ID
106.53.15.37
10/10
Confidence
52%
Reports
5
Location
CN
CN