Critical Alert
Security alert: 111.26.6.111 rated 10/10 based on 68 verified incidents.
Threat profile indicates sustained malicious activity with 47% confidence rating.
More threatening than 98% of monitored IPs
IP Address
111.26.6.111
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CN
Location
China Mobile Group JiLin ...
ASN 134810
68
Reports
Honeypot
Data Source
Threat Categories
Hacking
28
SSH
4
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
3. September 2026
Last Activity
3. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 134810, operated by China Mobile Group JiLin communications corporation) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
46%
Medium Confidence
Confidence History
5. Jun 2026 - 3. Sep 2026
47%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 111.26.6.111
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS134810
- ISP
- China Mobile Group JiLin communications corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 68
- First Reported
- 11 Nov 2025
- Last Reported
- 3 Sep 2026, 09:02
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS134810
China Mobile Group JiLin communications corporation
CN
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
51
Total IPs Monitored
443
Total Reports
8.7
Reports per IP
Network Context
This IP address belongs to China Mobile Group JiLin communications corporation (AS134810), which manages 51 IP addresses in our monitoring system. Out of these, 443 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 810,613 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
68
avg: 9
++
Network Comparison
Compared against 58 IPs in ASN 134810
Threat Level
10/10
network avg: 7.4
+
Total Reports
68
network avg: 10
++
Network China Mobile Group JiLin communications corporation has overall threat level 5/10
Geographic Comparison
Compared against 44,986 IPs in CN
Threat Level
10/10
country avg: 7.4
+
Total Reports
68
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Tuesday
15 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
57
SSH
17
Exploited Host
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
737,069 threat incidents tracked globally • Last 24h: 33,707 Logs
FEED
Top Threat Sources
-
01
United States144,069 19.5% -
02
Brazil110,913 15%
-
03
India82,851 11.2%
-
04
China44,986 6.1%
-
05
SC29,241 4%
-
06
Germany17,653 2.4%
-
07
Netherlands17,553 2.4%
-
08
Pakistan16,819 2.3%
-
09
Argentina16,198 2.2%
-
10
Colombia15,142 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8/10
Avg Threat
28%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
36.135.17.52
10/10
Confidence
61%
Reports
35
Location
CN
CN
111.26.163.40
10/10
Confidence
49%
Reports
5
Location
CN
CN
111.26.163.42
10/10
Confidence
43%
Reports
5
Location
CN
CN
111.26.163.43
10/10
Confidence
42%
Reports
6
Location
CN
CN
111.26.63.85
7/10
Confidence
35%
Reports
8
Location
CN
CN
36.135.62.79
7/10
Confidence
33%
Reports
6
Location
CN
CN
111.26.180.247
10/10
Confidence
30%
Reports
4
Location
CN
CN
111.26.163.41
10/10
Confidence
24%
Reports
4
Location
CN
CN
111.26.80.229
7/10
Confidence
24%
Reports
3
Location
CN
CN
36.135.62.85
6/10
Confidence
23%
Reports
1
Location
CN
CN
111.27.76.16
4/10
Confidence
23%
Reports
1
Location
CN
CN
111.26.168.27
4/10
Confidence
23%
Reports
1
Location
CN
CN
111.26.184.29
6/10
Confidence
22%
Reports
1
Location
CN
CN
111.26.163.34
10/10
Confidence
21%
Reports
4
Location
CN
CN
36.135.62.97
7/10
Confidence
20%
Reports
6
Location
CN
CN
111.26.163.33
10/10
Confidence
20%
Reports
4
Location
CN
CN
111.26.76.216
7/10
Confidence
19%
Reports
1
Location
CN
CN
111.26.79.159
10/10
Confidence
18%
Reports
144
Location
CN
CN
36.135.92.40
7/10
Confidence
17%
Reports
1
Location
CN
CN
111.26.63.83
7/10
Confidence
4%
Reports
14
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
222.220.102.32
10/10
Confidence
100%
Reports
12
ISP
Chinanet
203.56.198.45
10/10
Confidence
99%
Reports
26
ISP
Sichuan Chuanxn...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
42.51.42.209
10/10
Confidence
98%
Reports
21
ISP
Zhengzhou Fasti...
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
122.114.69.235
8/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
47%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
152.32.156.50
8/10
Confidence
47%
Reports
298
Location
IN
IN
5.63.13.124
8/10
Confidence
47%
Reports
283
Location
IR
IR
91.224.92.127
8/10
Confidence
47%
Reports
174
Location
GB
GB
80.87.206.19
10/10
Confidence
47%
Reports
168
Location
RU
RU
151.243.11.236
10/10
Confidence
47%
Reports
160
Location
AE
AE
47.86.33.52
8/10
Confidence
47%
Reports
133
Location
HK
HK
91.224.92.32
8/10
Confidence
47%
Reports
131
Location
GB
GB
95.203.26.57
10/10
Confidence
47%
Reports
120
Location
SE
SE
202.51.202.242
10/10
Confidence
47%
Reports
120
Location
ID
ID
103.59.94.62
10/10
Confidence
47%
Reports
104
Location
ID
ID
118.193.32.88
10/10
Confidence
47%
Reports
87
Location
HK
HK
142.93.168.170
8/10
Confidence
47%
Reports
82
Location
DE
DE
185.93.89.154
10/10
Confidence
47%
Reports
74
Location
IR
IR
45.33.109.8
8/10
Confidence
47%
Reports
64
Location
US
US
143.198.134.9
8/10
Confidence
47%
Reports
64
Location
US
US