Critical Alert
Security alert: 103.97.200.39 rated 10/10 based on 72 verified incidents.
Threat profile indicates sustained malicious activity with 85% confidence rating.
More threatening than 100% of monitored IPs
IP Address
103.97.200.39
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Hong Kong
Location
Zouter Limited
ASN 205548
72
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
Web App Attack
5
Exploited Host
5
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
15. September 2026
Last Activity
30. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 205548) with generally good reputation. The ISP Zouter Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
85%
Verified
Confidence History
11. Sep 2026 - 30. Sep 2026
85%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack Hacking | Honeypot x2 | 75% | |
| Exploited Host Hacking Web App Attack | Honeypot x3 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host Hacking Web App Attack | Honeypot x3 | 75% | |
| Exploited Host Hacking Web App Attack | Honeypot x3 | 75% | |
| Exploited Host Hacking Web App Attack | Honeypot x3 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.97.200.39
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
HK
- ASN
- AS205548
- ISP
- Zouter Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 72
- First Reported
- 6 Sep 2026
- Last Reported
- 30 Sep 2026, 22:35
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 869,546 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
72
avg: 9
++
Network Comparison
Compared against 3 IPs in ASN 205548
Threat Level
10/10
network avg: 9.0
=
Total Reports
72
network avg: 25
++
Geographic Comparison
Compared against 5,807 IPs in HK
Threat Level
10/10
country avg: 7.8
+
Total Reports
72
country avg: 27
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 Sep 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Friday
30 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
68
Exploited Host
13
Web App Attack
12
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
790,202 threat incidents tracked globally • Last 24h: 28,045 Logs
FEED
Top Threat Sources
-
01
United States153,889 19.5% -
02
Brazil114,010 14.4%
-
03
India92,783 11.7%
-
04
China47,436 6%
-
05
SC29,287 3.7%
-
06
Germany19,341 2.4%
-
07
Pakistan19,070 2.4%
-
08
Netherlands18,632 2.4%
-
09
Argentina16,895 2.1%
-
10
Indonesia15,745 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
8.5/10
Avg Threat
9%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
JP IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
2%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
150.107.36.82
8/10
Confidence
100%
Reports
237
ISP
UCLOUD INFORMAT...
183.179.44.89
10/10
Confidence
100%
Reports
93
ISP
Hong Kong Broad...
218.189.84.73
10/10
Confidence
100%
Reports
63
ISP
HGC Global Comm...
103.144.3.181
10/10
Confidence
100%
Reports
24
ISP
YISU CLOUD LTD
156.225.14.74
10/10
Confidence
100%
Reports
24
ISP
Liasail Global ...
101.36.119.203
10/10
Confidence
100%
Reports
22
ISP
UCLOUD INFORMAT...
150.5.157.20
10/10
Confidence
100%
Reports
22
ISP
Byteplus Pte. Ltd.
103.117.145.130
10/10
Confidence
100%
Reports
21
ISP
Netsec Limited
119.28.46.114
10/10
Confidence
100%
Reports
20
ISP
Tencent Buildin...
219.77.169.219
10/10
Confidence
100%
Reports
17
ISP
HKT Limited
103.143.239.201
8/10
Confidence
100%
Reports
14
ISP
YISU CLOUD LTD
101.36.125.2
10/10
Confidence
100%
Reports
14
ISP
UCLOUD INFORMAT...
45.153.129.182
10/10
Confidence
99%
Reports
16
ISP
Cloudie Limited
103.20.223.11
10/10
Confidence
98%
Reports
170
ISP
CNSERVERS
61.239.246.166
10/10
Confidence
98%
Reports
49
ISP
Hong Kong Broad...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
85%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
85%
Reports
142
Location
SC
SC
103.191.14.210
10/10
Confidence
85%
Reports
169
Location
ID
ID
61.9.8.21
10/10
Confidence
85%
Reports
8
Location
PH
PH
81.192.46.32
10/10
Confidence
85%
Reports
169
Location
MA
MA
185.198.240.174
10/10
Confidence
85%
Reports
12
Location
US
US
182.93.50.90
10/10
Confidence
85%
Reports
366
Location
MO
MO
103.63.108.25
10/10
Confidence
85%
Reports
137
Location
VN
VN
91.230.168.98
7/10
Confidence
85%
Reports
240
Location
US
US
164.92.178.58
8/10
Confidence
85%
Reports
11
Location
DE
DE
165.16.185.86
10/10
Confidence
85%
Reports
9
Location
ZA
ZA
103.191.14.243
10/10
Confidence
85%
Reports
188
Location
ID
ID
92.27.101.99
10/10
Confidence
85%
Reports
150
Location
GB
GB
193.176.31.220
8/10
Confidence
85%
Reports
11
Location
NL
NL
199.45.154.112
8/10
Confidence
85%
Reports
102
Location
US
US
182.191.73.9
10/10
Confidence
85%
Reports
10
Location
PK
PK