Substantial Risk
Threat level 8/10 for 111.238.174.6 based on 105 documented incidents.
Consistent suspicious behavior patterns. 85% confidence rating.
More threatening than 90% of monitored IPs
IP Address
111.238.174.6
IPv4
Public
JP
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
JP
Location
KDDI CORPORATION
ASN 2516
105
Reports
Mixed
Data Source
Threat Categories
SSH
30
Brute-Force
6
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
1. September 2026
Last Activity
30. September 2026
Recent (7 days)
13 incidents
Moderate Network Risk
The network hosting this IP (ASN 2516, operated by KDDI CORPORATION) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
85%
Verified
Confidence History
2. Sep 2026 - 30. Sep 2026
85%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| New | SSH Brute-Force | Community | 75% |
| New | SSH Brute-Force | Community | 75% |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 111.238.174.6
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
JP
- ASN
- AS2516
- ISP
- KDDI CORPORATION
DNS Information
- Reverse DNS
- KD111238174006.ppp-bb.dion.ne.jp
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 105
- First Reported
- 22 Feb 2026
- Last Reported
- 30 Sep 2026, 15:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS2516
KDDI CORPORATION
JP
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
44
Total IPs Monitored
128
Total Reports
2.9
Reports per IP
Network Context
This IP address belongs to KDDI CORPORATION (AS2516), which manages 44 IP addresses in our monitoring system. Out of these, 128 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 805,953 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
105
avg: 9
++
Network Comparison
Compared against 131 IPs in ASN 2516
Threat Level
8/10
network avg: 6.3
+
Total Reports
105
network avg: 2
++
Network KDDI CORPORATION has overall threat level 4/10
Geographic Comparison
Compared against 6,219 IPs in JP
Threat Level
8/10
country avg: 7.6
=
Total Reports
105
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
24 Sep 2026
4 reports
Daily Average
1
reports/day
Most Active
Wednesday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
105
Brute-Force
13
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
732,959 threat incidents tracked globally • Last 24h: 29,233 Logs
FEED
Top Threat Sources
-
01
United States143,148 19.5% -
02
Brazil110,706 15.1%
-
03
India82,092 11.2%
-
04
China44,715 6.1%
-
05
SC29,233 4%
-
06
Germany17,451 2.4%
-
07
Netherlands17,448 2.4%
-
08
Pakistan16,608 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.8/10
Avg Threat
32%
Avg Confidence
13
High Threat
High-risk network: Majority of related IPs are flagged
210.174.104.98
10/10
Confidence
95%
Reports
12
Location
JP
JP
114.16.207.90
10/10
Confidence
49%
Reports
7
Location
JP
JP
240b:12:1b8c:a000:24a9:16ab:f91d:c4df
10/10
Confidence
39%
Reports
3
Location
JP
JP
125.50.171.49
10/10
Confidence
36%
Reports
4
Location
JP
JP
14.8.27.140
10/10
Confidence
35%
Reports
3
Location
JP
JP
222.2.133.214
10/10
Confidence
34%
Reports
3
Location
JP
JP
125.50.183.192
7/10
Confidence
33%
Reports
2
Location
JP
JP
111.104.39.22
7/10
Confidence
32%
Reports
3
Location
JP
JP
240b:12:1b8c:a000:f883:cfd0:6b91:b2da
7/10
Confidence
27%
Reports
2
Location
JP
JP
210.250.139.34
7/10
Confidence
26%
Reports
1
Location
JP
JP
210.169.19.28
10/10
Confidence
25%
Reports
7
Location
JP
JP
27.94.121.31
10/10
Confidence
24%
Reports
3
Location
JP
JP
36.13.19.209
7/10
Confidence
24%
Reports
1
Location
JP
JP
2001:268:d2e6:88ac:4539:1f1a:5a3:4e71
6/10
Confidence
23%
Reports
1
Location
JP
JP
2001:268:c203:6bc9:a011:c244:f05:8798
6/10
Confidence
23%
Reports
1
Location
JP
JP
2001:268:73c5:4e14:594:baca:2108:cddf
6/10
Confidence
23%
Reports
1
Location
JP
JP
106.153.250.12
4/10
Confidence
23%
Reports
1
Location
JP
JP
2001:268:c215:57c2:e54d:285:2d4f:2e40
6/10
Confidence
23%
Reports
1
Location
JP
JP
2001:268:c211:2489:8d0b:e389:2108:c32e
6/10
Confidence
23%
Reports
1
Location
JP
JP
2001:268:c207:450c:4596:ed4e:4332:e03f
6/10
Confidence
23%
Reports
1
Location
JP
JP
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
124.45.31.57
10/10
Confidence
100%
Reports
21
ISP
NTT-ME Corporation
2400:8d60:8::96b0:ddfd
8/10
Confidence
100%
Reports
17
ISP
Evoxt Sdn. Bhd.
34.104.201.69
8/10
Confidence
100%
Reports
16
ISP
Google LLC
107.155.15.218
8/10
Confidence
97%
Reports
15
ISP
UCLOUD INFORMAT...
172.105.196.91
8/10
Confidence
96%
Reports
17
ISP
Akamai Connecte...
34.146.5.76
8/10
Confidence
96%
Reports
14
ISP
Google LLC
133.18.142.16
10/10
Confidence
95%
Reports
60
ISP
KAGOYA JAPAN Inc.
210.174.104.98
10/10
Confidence
95%
Reports
12
ISP
KDDI CORPORATION
43.240.14.35
10/10
Confidence
94%
Reports
161
ISP
Cloudie Limited
34.146.145.165
10/10
Confidence
94%
Reports
101
ISP
Google LLC
178.214.214.53
10/10
Confidence
94%
Reports
47
ISP
ASMBP LLC
178.214.214.117
10/10
Confidence
94%
Reports
46
ISP
ASMBP LLC
178.214.214.138
10/10
Confidence
94%
Reports
45
ISP
ASMBP LLC
178.214.214.68
10/10
Confidence
94%
Reports
45
ISP
ASMBP LLC
178.214.214.22
10/10
Confidence
94%
Reports
44
ISP
ASMBP LLC
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
85%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.236
10/10
Confidence
85%
Reports
1,044
Location
TW
TW
160.119.76.24
10/10
Confidence
85%
Reports
375
Location
SC
SC
62.60.130.230
8/10
Confidence
85%
Reports
311
Location
IR
IR
63.141.242.2
10/10
Confidence
85%
Reports
308
Location
US
US
66.132.172.44
8/10
Confidence
85%
Reports
285
Location
US
US
66.132.195.56
8/10
Confidence
85%
Reports
274
Location
US
US
144.229.29.3
10/10
Confidence
85%
Reports
271
Location
US
US
66.132.172.216
8/10
Confidence
85%
Reports
266
Location
US
US
104.208.108.166
10/10
Confidence
85%
Reports
254
Location
HK
HK
66.132.195.43
8/10
Confidence
85%
Reports
254
Location
US
US
66.132.195.61
8/10
Confidence
85%
Reports
253
Location
US
US
195.184.76.224
10/10
Confidence
85%
Reports
247
Location
US
US
195.184.76.228
10/10
Confidence
85%
Reports
246
Location
US
US
195.184.76.227
10/10
Confidence
85%
Reports
243
Location
US
US
91.230.168.40
8/10
Confidence
85%
Reports
241
Location
US
US