Extreme Threat
IP 103.30.65.239 classified at threat level 10/10 with 5 documented attacks.
Advanced threat indicators confirmed with 0% certainty.
More threatening than 93% of monitored IPs
IP Address
103.30.65.239
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
IN
Location
RailTel Corporation of In...
ASN 24186
5
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
5
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Reputable Network
This IP is hosted on a network (ASN 24186) with generally good reputation. The ISP RailTel Corporation of India Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
22. Jan 2026 - 23. Jan 2026
0%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot x3 | 75% |
Technical Details
Basic Information
- IP Address
- 103.30.65.239
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS24186
- ISP
- RailTel Corporation of India Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 22 Jan 2026
- Last Reported
- 23 Jan 2026, 15:42
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24186
RailTel Corporation of India Ltd
IN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
57
Total IPs Monitored
1,340
Total Reports
23.5
Reports per IP
Network Context
This IP address belongs to RailTel Corporation of India Ltd (AS24186), which manages 57 IP addresses in our monitoring system. Out of these, 1,340 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,352,150 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
5
avg: 7
-
Network Comparison
Compared against 2,041 IPs in ASN 24186
Threat Level
10/10
network avg: 6.7
+
Total Reports
5
network avg: 3
++
Network RailTel Corporation of India Ltd has overall threat level 2/10
Geographic Comparison
Compared against 104,165 IPs in IN
Threat Level
10/10
country avg: 6.6
++
Total Reports
5
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,232,416 threat incidents tracked globally • Last 24h: 20,362 Logs
FEED
Top Threat Sources
-
01
Brazil261,727 21.2% -
02
United States213,639 17.3% -
03
India104,165 8.5%
-
04
China52,542 4.3% -
05
Argentina42,607 3.5% -
06
SC29,488 2.4% -
07
Mexico28,150 2.3% -
08
Russia27,413 2.2% -
09
Germany25,870 2.1% -
10
Colombia24,360 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
45%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
122.252.241.175
10/10
Confidence
73%
Reports
15
Location
IN
IN
103.61.72.16
8/10
Confidence
64%
Reports
23
Location
IN
IN
103.30.65.221
10/10
Confidence
52%
Reports
10
Location
IN
IN
202.21.44.159
10/10
Confidence
50%
Reports
9
Location
IN
IN
202.141.1.114
10/10
Confidence
49%
Reports
6
Location
IN
IN
202.141.36.155
8/10
Confidence
48%
Reports
9
Location
IN
IN
144.16.3.74
10/10
Confidence
48%
Reports
9
Location
IN
IN
103.15.253.163
10/10
Confidence
46%
Reports
8
Location
IN
IN
112.133.211.10
8/10
Confidence
43%
Reports
6
Location
IN
IN
202.141.83.77
8/10
Confidence
42%
Reports
6
Location
IN
IN
202.176.1.225
10/10
Confidence
41%
Reports
32
Location
IN
IN
112.133.239.116
10/10
Confidence
41%
Reports
9
Location
IN
IN
103.197.113.122
10/10
Confidence
41%
Reports
8
Location
IN
IN
202.141.8.255
7/10
Confidence
39%
Reports
12
Location
IN
IN
112.133.239.125
10/10
Confidence
39%
Reports
8
Location
IN
IN
202.141.67.37
10/10
Confidence
39%
Reports
6
Location
IN
IN
202.141.32.195
10/10
Confidence
37%
Reports
14
Location
IN
IN
112.133.204.98
10/10
Confidence
36%
Reports
6
Location
IN
IN
103.199.207.37
8/10
Confidence
36%
Reports
5
Location
IN
IN
2401:b200:203a:864f:bd32:463d:5289:8d12
10/10
Confidence
36%
Reports
4
Location
IN
IN
IPs from the same subnet range, likely same network segment.
4
Related IPs
7.5/10
Avg Threat
25%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
203.145.165.2
10/10
Confidence
96%
Reports
55
ISP
Bharti Airtel L...
113.11.231.104
10/10
Confidence
96%
Reports
35
ISP
Krishna Raghava...
4.240.100.218
10/10
Confidence
96%
Reports
35
ISP
Microsoft Corpo...
121.242.232.216
10/10
Confidence
96%
Reports
23
ISP
TATA Communicat...
203.190.153.90
10/10
Confidence
96%
Reports
21
ISP
Software Techno...
103.87.175.110
8/10
Confidence
94%
Reports
153
ISP
Tier 4 Cloud Se...
13.234.214.153
10/10
Confidence
94%
Reports
77
ISP
Amazon.com, Inc.
103.154.233.221
10/10
Confidence
94%
Reports
49
ISP
Netclues Techno...
141.148.207.84
10/10
Confidence
94%
Reports
48
ISP
Oracle Corporation
168.138.112.29
10/10
Confidence
94%
Reports
29
ISP
Oracle Corporation
49.207.182.187
10/10
Confidence
94%
Reports
20
ISP
Atria Convergen...
182.48.206.84
8/10
Confidence
94%
Reports
16
ISP
D-Vois Broadban...
103.174.103.177
10/10
Confidence
93%
Reports
5,422
ISP
IDIGITALCAMP WE...
103.113.160.247
10/10
Confidence
93%
Reports
2,896
ISP
KUDOSHUB TECHNO...
103.51.116.158
10/10
Confidence
93%
Reports
220
ISP
Primesoftex Ltd