Significant Threat
IP 103.70.196.248 identified as significant threat (7/10) from 2 events.
Multiple malicious indicators detected. Confidence level: 40%.
More threatening than 84% of monitored IPs
IP Address
103.70.196.248
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
India
Location
Kerala Vision Broad Band ...
ASN 138754
2
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
2
Web App Attack
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
30. September 2026
Last Activity
30. September 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 138754) with generally good reputation. The ISP Kerala Vision Broad Band Private Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
4/10
Low
Confidence Score
40%
Medium Confidence
Confidence History
30. Sep 2026
40%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.70.196.248
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS138754
- ISP
- Kerala Vision Broad Band Private Limited
DNS Information
- Reverse DNS
- keralavisionisp-dynamic-248.196.70.103.keralavisionisp.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 2
- First Reported
- 30 Sep 2026
- Last Reported
- 30 Sep 2026, 06:12
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS138754
Kerala Vision Broad Band Private Limited
IN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
25
Total IPs Monitored
331
Total Reports
13.2
Reports per IP
Network Context
This IP address belongs to Kerala Vision Broad Band Private Limited (AS138754), which manages 25 IP addresses in our monitoring system. Out of these, 331 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 806,599 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
2
avg: 9
--
Network Comparison
Compared against 687 IPs in ASN 138754
Threat Level
7/10
network avg: 6.6
=
Total Reports
2
network avg: 2
=
Network Kerala Vision Broad Band Private Limited has overall threat level 2/10
Geographic Comparison
Compared against 82,121 IPs in IN
Threat Level
7/10
country avg: 6.5
=
Total Reports
2
country avg: 3
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
2
Web App Attack
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
733,504 threat incidents tracked globally • Last 24h: 28,676 Logs
FEED
Top Threat Sources
-
01
United States143,262 19.5% -
02
Brazil110,751 15.1%
-
03
India82,121 11.2%
-
04
China44,763 6.1%
-
05
SC29,233 4%
-
06
Germany17,490 2.4%
-
07
Netherlands17,472 2.4%
-
08
Pakistan16,640 2.3%
-
09
Argentina16,189 2.2%
-
10
Colombia15,134 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
59%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.146.174.129
8/10
Confidence
81%
Reports
30
Location
IN
IN
103.177.253.235
10/10
Confidence
81%
Reports
8
Location
IN
IN
103.160.232.131
10/10
Confidence
80%
Reports
17
Location
IN
IN
103.145.172.170
8/10
Confidence
80%
Reports
5
Location
IN
IN
103.177.253.56
10/10
Confidence
65%
Reports
5
Location
IN
IN
103.177.253.181
10/10
Confidence
65%
Reports
5
Location
IN
IN
137.59.87.162
10/10
Confidence
63%
Reports
5
Location
IN
IN
103.160.194.179
10/10
Confidence
59%
Reports
4
Location
IN
IN
103.70.196.131
10/10
Confidence
53%
Reports
4
Location
IN
IN
103.189.214.146
8/10
Confidence
53%
Reports
3
Location
IN
IN
103.177.252.61
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.70.196.226
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.70.196.169
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.114.253.37
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.114.252.7
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.70.196.188
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.177.253.231
10/10
Confidence
51%
Reports
3
Location
IN
IN
2403:a080:836:667c:2017:4f55:1195:8b63
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.161.55.98
10/10
Confidence
50%
Reports
4
Location
IN
IN
103.161.55.158
8/10
Confidence
48%
Reports
4
Location
IN
IN
IPs from the same subnet range, likely same network segment.
19
Related IPs
7.7/10
Avg Threat
28%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.70.196.131
10/10
Confidence
53%
Reports
4
Location
IN
IN
103.70.196.226
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.70.196.169
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.70.196.188
10/10
Confidence
51%
Reports
3
Location
IN
IN
103.70.196.175
7/10
Confidence
40%
Reports
2
Location
IN
IN
103.70.196.206
7/10
Confidence
40%
Reports
2
Location
IN
IN
103.70.196.203
7/10
Confidence
36%
Reports
2
Location
IN
IN
103.70.196.209
10/10
Confidence
30%
Reports
3
Location
IN
IN
103.70.196.96
10/10
Confidence
29%
Reports
3
Location
IN
IN
103.70.196.144
7/10
Confidence
28%
Reports
1
Location
IN
IN
103.70.196.31
6/10
Confidence
23%
Reports
1
Location
IN
IN
103.70.196.222
6/10
Confidence
23%
Reports
1
Location
IN
IN
103.70.196.207
6/10
Confidence
22%
Reports
1
Location
IN
IN
103.70.196.148
7/10
Confidence
20%
Reports
2
Location
IN
IN
103.70.196.18
7/10
Confidence
14%
Reports
1
Location
IN
IN
103.70.196.150
5/10
Confidence
13%
Reports
1
Location
IN
IN
103.70.196.220
7/10
Confidence
3%
Reports
1
Location
IN
IN
103.70.196.230
7/10
Confidence
2%
Reports
1
Location
IN
IN
103.70.196.45
7/10
Confidence
2%
Reports
1
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
160.187.54.114
10/10
Confidence
100%
Reports
78
ISP
Imegh Private L...
220.158.184.112
10/10
Confidence
100%
Reports
61
ISP
Powergrid Teles...
103.170.157.62
10/10
Confidence
100%
Reports
49
ISP
Airline Interne...
34.14.163.161
10/10
Confidence
100%
Reports
44
ISP
Google LLC
103.57.64.11
10/10
Confidence
100%
Reports
42
ISP
Net for Choice
202.176.1.225
8/10
Confidence
100%
Reports
30
ISP
RailTel Corpora...
121.200.54.15
8/10
Confidence
100%
Reports
25
ISP
Wireline Soluti...
106.51.93.11
8/10
Confidence
100%
Reports
24
ISP
Atria Convergen...
103.5.132.45
8/10
Confidence
100%
Reports
23
ISP
Bangalore Broad...
14.96.50.90
8/10
Confidence
100%
Reports
23
ISP
Tata Teleservic...
59.95.96.182
8/10
Confidence
100%
Reports
22
ISP
National Intern...
103.54.29.28
8/10
Confidence
100%
Reports
22
ISP
Sonic Wireless ...
52.172.235.175
8/10
Confidence
100%
Reports
21
ISP
Microsoft Corpo...
183.82.103.178
8/10
Confidence
100%
Reports
20
ISP
Atria Convergen...
49.249.180.98
8/10
Confidence
100%
Reports
20
ISP
Tata Teleservic...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
40%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
204.76.203.30
8/10
Confidence
40%
Reports
1,255
Location
NL
NL
213.209.159.226
8/10
Confidence
40%
Reports
960
Location
TW
TW
183.81.168.186
10/10
Confidence
40%
Reports
658
Location
US
US
85.217.140.2
10/10
Confidence
40%
Reports
546
Location
FR
FR
5.61.209.44
10/10
Confidence
40%
Reports
511
Location
SC
SC
24.49.104.40
10/10
Confidence
40%
Reports
280
Location
US
US
71.56.56.161
10/10
Confidence
40%
Reports
276
Location
US
US
66.8.182.34
10/10
Confidence
40%
Reports
273
Location
US
US
45.148.10.200
8/10
Confidence
40%
Reports
270
Location
NL
NL
45.194.67.27
10/10
Confidence
40%
Reports
266
Location
US
US
173.91.196.12
10/10
Confidence
40%
Reports
264
Location
US
US
45.194.67.30
10/10
Confidence
40%
Reports
217
Location
US
US
45.194.67.29
10/10
Confidence
40%
Reports
213
Location
US
US
193.24.123.22
10/10
Confidence
40%
Reports
204
Location
RU
RU
107.189.21.227
7/10
Confidence
40%
Reports
167
Location
NL
NL