Elevated Risk
Elevated threat level 8/10 for IP 106.38.205.224 from 35 reported incidents.
Behavioral profile indicates cyber threat activity with 84% confidence.
More threatening than 90% of monitored IPs
IP Address
106.38.205.224
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
IDC, China Telecommunicat...
ASN 23724
35
Reports
Mixed
Data Source
Threat Categories
SSH
27
Brute-Force
10
Hacking
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
8. September 2026
Last Activity
7. October 2026
Recent (7 days)
9 incidents
Reputable Network
This IP is hosted on a network (ASN 23724) with generally good reputation. The ISP IDC, China Telecommunications Corporation maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
84%
Verified
Confidence History
24. Feb 2026 - 7. Oct 2026
84%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| New | SSH Brute-Force | Community | 75% |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community x2 | 75% | |
| Hacking | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 106.38.205.224
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS23724
- ISP
- IDC, China Telecommunications Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 35
- First Reported
- 22 Feb 2026
- Last Reported
- 7 Oct 2026, 19:04
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS23724
IDC, China Telecommunications Corporation
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
33
Total IPs Monitored
893
Total Reports
27.1
Reports per IP
Network Context
This IP address belongs to IDC, China Telecommunications Corporation (AS23724), which manages 33 IP addresses in our monitoring system. Out of these, 893 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,206 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
35
avg: 9
++
Network Comparison
Compared against 78 IPs in ASN 23724
Threat Level
8/10
network avg: 6.9
+
Total Reports
35
network avg: 14
++
Network IDC, China Telecommunications Corporation has overall threat level 2/10
Geographic Comparison
Compared against 46,044 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
35
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Oct 2026
3 reports
Daily Average
0.4
reports/day
Most Active
Tuesday
13 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
32
Brute-Force
10
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
756,549 threat incidents tracked globally • Last 24h: 29,219 Logs
FEED
Top Threat Sources
-
01
United States148,056 19.6% -
02
Brazil111,808 14.8%
-
03
India87,140 11.5%
-
04
China46,044 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,353 2.4%
-
07
Netherlands17,970 2.4%
-
08
Pakistan17,792 2.4%
-
09
Argentina16,265 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.8/10
Avg Threat
42%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
119.255.245.44
10/10
Confidence
88%
Reports
26
Location
CN
CN
101.254.159.210
10/10
Confidence
86%
Reports
65
Location
CN
CN
106.37.72.234
8/10
Confidence
82%
Reports
48
Location
CN
CN
203.176.95.143
8/10
Confidence
81%
Reports
9
Location
CN
CN
49.7.204.85
10/10
Confidence
77%
Reports
78
Location
CN
CN
220.181.1.163
8/10
Confidence
74%
Reports
237
Location
CN
CN
36.110.172.218
8/10
Confidence
37%
Reports
27
Location
CN
CN
220.181.108.91
6/10
Confidence
33%
Reports
3
Location
CN
CN
106.38.195.164
10/10
Confidence
29%
Reports
33
Location
CN
CN
211.157.147.142
4/10
Confidence
24%
Reports
2
Location
CN
CN
220.181.108.156
5/10
Confidence
24%
Reports
2
Location
CN
CN
101.198.0.140
6/10
Confidence
24%
Reports
2
Location
CN
CN
101.198.0.133
6/10
Confidence
24%
Reports
2
Location
CN
CN
220.181.51.90
6/10
Confidence
24%
Reports
2
Location
CN
CN
211.100.16.175
7/10
Confidence
24%
Reports
1
Location
CN
CN
220.181.84.72
7/10
Confidence
24%
Reports
1
Location
CN
CN
220.181.108.112
6/10
Confidence
23%
Reports
3
Location
CN
CN
220.181.108.101
5/10
Confidence
23%
Reports
2
Location
CN
CN
220.181.108.114
5/10
Confidence
23%
Reports
2
Location
CN
CN
101.198.0.157
0/10
Confidence
23%
Reports
2
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
27.128.171.39
10/10
Confidence
100%
Reports
33
ISP
Chinanet
211.101.247.196
10/10
Confidence
100%
Reports
28
ISP
Cloud Computing...
42.51.42.209
10/10
Confidence
100%
Reports
24
ISP
Zhengzhou Fasti...
118.121.202.149
10/10
Confidence
100%
Reports
21
ISP
CHINANET SiChua...
27.155.120.131
10/10
Confidence
100%
Reports
20
ISP
Fuzhou
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
112.123.228.180
10/10
Confidence
100%
Reports
18
ISP
CHINA UNICOM Ch...
118.145.246.44
10/10
Confidence
100%
Reports
18
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
15
ISP
China Networks ...
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
120.48.170.74
10/10
Confidence
100%
Reports
14
ISP
Beijing Baidu N...
220.250.52.101
8/10
Confidence
100%
Reports
14
ISP
CHINA UNICOM Ch...
117.50.70.169
8/10
Confidence
100%
Reports
13
ISP
China Unicom Be...
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
14.103.110.123
10/10
Confidence
100%
Reports
13
ISP
China Telecom G...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
78.124.94.181
8/10
Confidence
84%
Reports
9
Location
FR
FR
66.132.195.109
8/10
Confidence
84%
Reports
81
Location
US
US
42.96.19.37
10/10
Confidence
84%
Reports
77
Location
VN
VN
120.48.17.39
8/10
Confidence
84%
Reports
11
Location
CN
CN
160.22.131.196
10/10
Confidence
84%
Reports
34
Location
IN
IN
91.230.168.44
10/10
Confidence
84%
Reports
266
Location
US
US
94.154.46.244
8/10
Confidence
84%
Reports
14
Location
US
US
137.131.208.99
10/10
Confidence
84%
Reports
121
Location
BR
BR
190.159.39.57
8/10
Confidence
84%
Reports
53
Location
CO
CO
45.156.129.127
10/10
Confidence
84%
Reports
33
Location
PT
PT
91.230.168.204
8/10
Confidence
84%
Reports
218
Location
US
US
192.210.243.12
10/10
Confidence
84%
Reports
52
Location
US
US
103.200.25.79
10/10
Confidence
84%
Reports
74
Location
VN
VN
183.66.166.30
10/10
Confidence
84%
Reports
51
Location
CN
CN
195.178.110.204
8/10
Confidence
84%
Reports
777
Location
BG
BG