Critical Alert
Security alert: 113.23.225.9 rated 10/10 based on 67 verified incidents.
Threat profile indicates sustained malicious activity with 100% confidence rating.
More threatening than 100% of monitored IPs
IP Address
113.23.225.9
IPv4
Public
MY
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Malaysia
Location
Extreme Broadband - Total...
ASN 38182
67
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
27
Brute-Force
3
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
5. September 2026
Last Activity
13. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 38182) with generally good reputation. The ISP Extreme Broadband - Total Broadband Experience maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
100%
Verified
Confidence History
9. Sep 2026 - 13. Sep 2026
100%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 113.23.225.9
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
MY
- ASN
- AS38182
- ISP
- Extreme Broadband - Total Broadband Experience
DNS Information
- Reverse DNS
- mail.ipmart.biz
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 67
- First Reported
- 5 Sep 2026
- Last Reported
- 13 Sep 2026, 19:16
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,531 reported IPs worldwide
Threat Level
10/10
avg: 5.8
++
Total Reports
67
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 38182
Threat Level
10/10
network avg: 7.5
+
Total Reports
67
network avg: 34
++
Geographic Comparison
Compared against 3,513 IPs in MY
Threat Level
10/10
country avg: 6.3
++
Total Reports
67
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Sep 2026
31 reports
Daily Average
2.2
reports/day
Most Active
Wednesday
31 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
62
Hacking
62
Brute-Force
5
Exploited Host
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
698,127 threat incidents tracked globally • Last 24h: 22,739 Logs
FEED
Top Threat Sources
-
01
United States134,882 19.3% -
02
Brazil109,417 15.7%
-
03
India75,795 10.9%
-
04
China43,111 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,470 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,807 2.3%
-
09
Pakistan15,204 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
5/10
Avg Threat
25%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
137.59.109.132
10/10
Confidence
100%
Reports
40
ISP
Exa Bytes Netwo...
175.145.176.12
8/10
Confidence
100%
Reports
26
ISP
TM TECHNOLOGY S...
115.134.210.81
10/10
Confidence
100%
Reports
25
ISP
TM TECHNOLOGY S...
115.134.66.23
8/10
Confidence
100%
Reports
23
ISP
TM TECHNOLOGY S...
60.53.133.243
10/10
Confidence
100%
Reports
19
ISP
TM TECHNOLOGY S...
2001:f40:93f:1cbc:e6d3:1a1c:3f32:a081
8/10
Confidence
100%
Reports
15
ISP
TIME dotCom Ber...
202.165.29.119
8/10
Confidence
99%
Reports
99
ISP
TM TECHNOLOGY S...
43.225.108.103
8/10
Confidence
99%
Reports
43
ISP
iCore Technolog...
115.133.72.235
8/10
Confidence
99%
Reports
18
ISP
TM TECHNOLOGY S...
202.184.144.220
10/10
Confidence
98%
Reports
55
ISP
TIME dotCom Ber...
123.100.226.79
10/10
Confidence
98%
Reports
46
ISP
PT. EXABYTES NE...
202.165.26.42
10/10
Confidence
98%
Reports
12
ISP
TM TECHNOLOGY S...
146.70.15.27
8/10
Confidence
97%
Reports
61
ISP
M247 Europe SRL
202.165.22.246
8/10
Confidence
97%
Reports
55
ISP
TM TECHNOLOGY S...
202.184.134.88
10/10
Confidence
97%
Reports
39
ISP
TIME dotCom Ber...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.137
10/10
Confidence
100%
Reports
1,449
Location
BG
BG
103.127.30.137
8/10
Confidence
100%
Reports
720
Location
IN
IN
213.177.179.195
10/10
Confidence
100%
Reports
701
Location
TW
TW
176.65.139.181
10/10
Confidence
100%
Reports
614
Location
LU
LU
185.242.3.195
10/10
Confidence
100%
Reports
601
Location
NL
NL
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
213.209.159.208
10/10
Confidence
100%
Reports
541
Location
DE
DE
4.197.100.161
10/10
Confidence
100%
Reports
522
Location
AU
AU
45.148.10.204
8/10
Confidence
100%
Reports
509
Location
NL
NL
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
20.27.219.18
10/10
Confidence
100%
Reports
449
Location
JP
JP
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
72.167.150.128
8/10
Confidence
100%
Reports
429
Location
US
US
195.178.110.217
10/10
Confidence
100%
Reports
382
Location
BG
BG
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2