Critical Alert
Security alert: 112.54.134.4 rated 10/10 based on 42 verified incidents.
Threat profile indicates sustained malicious activity with 16% confidence rating.
More threatening than 94% of monitored IPs
IP Address
112.54.134.4
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
China Mobile Communicaito...
ASN 56048
42
Reports
Honeypot
Data Source
Threat Categories
SSH
25
Hacking
5
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 56048) with generally good reputation. The ISP China Mobile Communicaitons Corporation maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
12%
Low Confidence
Confidence History
14. Apr 2026 - 17. Jul 2026
16%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 112.54.134.4
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS56048
- ISP
- China Mobile Communicaitons Corporation
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 42
- First Reported
- 30 Mar 2026
- Last Reported
- 17 Jul 2026, 13:54
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS56048
China Mobile Communicaitons Corporation
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
74
Total IPs Monitored
647
Total Reports
8.7
Reports per IP
Network Context
This IP address belongs to China Mobile Communicaitons Corporation (AS56048), which manages 74 IP addresses in our monitoring system. Out of these, 647 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 847,199 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
42
avg: 9
++
Network Comparison
Compared against 104 IPs in ASN 56048
Threat Level
10/10
network avg: 7.5
+
Total Reports
42
network avg: 7
++
Network China Mobile Communicaitons Corporation has overall threat level 2/10
Geographic Comparison
Compared against 46,505 IPs in CN
Threat Level
10/10
country avg: 7.4
+
Total Reports
42
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
35
Hacking
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
769,863 threat incidents tracked globally • Last 24h: 28,011 Logs
FEED
Top Threat Sources
-
01
United States150,333 19.5% -
02
Brazil112,686 14.6%
-
03
India89,670 11.6%
-
04
China46,505 6%
-
05
SC29,264 3.8%
-
06
Germany18,779 2.4%
-
07
Pakistan18,322 2.4%
-
08
Netherlands18,215 2.4%
-
09
Argentina16,612 2.2%
-
10
Colombia15,306 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.4/10
Avg Threat
29%
Avg Confidence
19
High Threat
High-risk network: Majority of related IPs are flagged
39.155.182.194
10/10
Confidence
96%
Reports
61
Location
CN
CN
223.71.14.142
10/10
Confidence
96%
Reports
38
Location
CN
CN
117.136.38.81
8/10
Confidence
34%
Reports
4
Location
CN
CN
223.104.43.46
7/10
Confidence
32%
Reports
2
Location
CN
CN
223.72.101.39
7/10
Confidence
26%
Reports
1
Location
CN
CN
183.241.12.187
7/10
Confidence
26%
Reports
1
Location
CN
CN
117.136.38.23
7/10
Confidence
24%
Reports
2
Location
CN
CN
120.245.113.163
7/10
Confidence
24%
Reports
2
Location
CN
CN
117.136.38.8
7/10
Confidence
23%
Reports
1
Location
CN
CN
117.136.38.5
4/10
Confidence
23%
Reports
1
Location
CN
CN
39.144.78.164
7/10
Confidence
23%
Reports
1
Location
CN
CN
117.133.61.13
7/10
Confidence
22%
Reports
1
Location
CN
CN
183.243.126.46
10/10
Confidence
20%
Reports
6
Location
CN
CN
120.244.100.211
7/10
Confidence
20%
Reports
1
Location
CN
CN
117.136.0.114
7/10
Confidence
19%
Reports
1
Location
CN
CN
117.133.61.0
7/10
Confidence
18%
Reports
1
Location
CN
CN
120.244.202.79
7/10
Confidence
18%
Reports
1
Location
CN
CN
120.244.163.160
7/10
Confidence
13%
Reports
1
Location
CN
CN
223.69.164.211
7/10
Confidence
11%
Reports
1
Location
CN
CN
223.70.160.243
7/10
Confidence
10%
Reports
1
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
27.128.171.39
10/10
Confidence
100%
Reports
33
ISP
Chinanet
211.101.247.196
10/10
Confidence
100%
Reports
28
ISP
Cloud Computing...
118.121.202.149
10/10
Confidence
100%
Reports
21
ISP
CHINANET SiChua...
27.155.120.131
10/10
Confidence
100%
Reports
20
ISP
Fuzhou
112.123.228.180
10/10
Confidence
100%
Reports
18
ISP
CHINA UNICOM Ch...
118.145.246.44
10/10
Confidence
100%
Reports
18
ISP
Beijing Volcano...
36.134.208.91
10/10
Confidence
100%
Reports
17
ISP
China Mobile Co...
106.120.205.138
10/10
Confidence
100%
Reports
15
ISP
China Networks ...
117.50.199.249
10/10
Confidence
100%
Reports
15
ISP
China Unicom Be...
120.48.170.74
10/10
Confidence
100%
Reports
14
ISP
Beijing Baidu N...
14.103.110.123
10/10
Confidence
100%
Reports
14
ISP
China Telecom G...
117.50.70.169
8/10
Confidence
100%
Reports
13
ISP
China Unicom Be...
115.191.27.238
10/10
Confidence
99%
Reports
15
ISP
Beijing Volcano...
125.77.73.145
8/10
Confidence
99%
Reports
13
ISP
Chinanet
27.155.103.100
8/10
Confidence
99%
Reports
12
ISP
Fuzhou
IPs with similar threat level and confidence scores.
15
Related IPs
3/10
Avg Threat
16%
Avg Confidence
136.71.197.82
3/10
Confidence
16%
Reports
1
Location
US
US
139.99.134.242
3/10
Confidence
16%
Reports
1
Location
AU
AU
173.255.253.70
3/10
Confidence
16%
Reports
1
Location
US
US
198.244.169.18
3/10
Confidence
16%
Reports
1
Location
GB
GB
2001:bc8:1d90:2cd3:dc00:ff:feed:2092
3/10
Confidence
16%
Reports
1
Location
PL
PL
51.178.138.86
3/10
Confidence
16%
Reports
1
Location
FR
FR
35.252.89.173
3/10
Confidence
16%
Reports
1
Location
US
US
5.211.105.76
3/10
Confidence
16%
Reports
1
Location
IR
IR
35.231.224.243
3/10
Confidence
16%
Reports
1
Location
US
US
217.60.196.7
3/10
Confidence
16%
Reports
1
Location
DE
DE
34.73.233.42
3/10
Confidence
16%
Reports
1
Location
US
US
128.24.161.37
3/10
Confidence
16%
Reports
1
Location
US
US
189.188.11.198
3/10
Confidence
16%
Reports
1
Location
MX
MX
35.202.248.41
3/10
Confidence
16%
Reports
1
Location
US
US
13.89.125.195
3/10
Confidence
16%
Reports
1
Location
US
US