Elevated Risk
Elevated threat level 8/10 for IP 114.220.238.224 from 19 reported incidents.
Behavioral profile indicates cyber threat activity with 63% confidence.
More threatening than 89% of monitored IPs
IP Address
114.220.238.224
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
Chinanet
ASN 4134
19
Reports
Mixed
Data Source
Threat Categories
SSH
19
Brute-Force
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
2. October 2026
Last Activity
2. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 4134) with generally good reputation. The ISP Chinanet maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
63%
High Confidence
Confidence History
24. Feb 2026 - 2. Oct 2026
63%
Current
Stable
Trend
Security Reports (19)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 114.220.238.224
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS4134
- ISP
- Chinanet
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 19
- First Reported
- 24 Feb 2026
- Last Reported
- 2 Oct 2026, 17:20
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4134
Chinanet
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
8,261
Total IPs Monitored
33,059
Total Reports
4
Reports per IP
Network Context
This IP address belongs to Chinanet (AS4134), which manages 8,261 IP addresses in our monitoring system. Out of these, 33,059 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
89
%
Global Threat Ranking
This IP is more threatening than 89% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 833,163 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
19
avg: 9
++
Network Comparison
Compared against 14,975 IPs in ASN 4134
Threat Level
8/10
network avg: 7.4
=
Total Reports
19
network avg: 3
++
Network Chinanet has overall threat level 3/10
Geographic Comparison
Compared against 46,083 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
19
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Tuesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
19
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
757,422 threat incidents tracked globally • Last 24h: 30,543 Logs
FEED
Top Threat Sources
-
01
United States148,250 19.6% -
02
Brazil111,873 14.8%
-
03
India87,197 11.5%
-
04
China46,083 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,439 2.4%
-
07
Netherlands17,997 2.4%
-
08
Pakistan17,824 2.4%
-
09
Argentina16,270 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
96%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
27.128.171.39
10/10
Confidence
100%
Reports
33
Location
CN
CN
202.101.144.44
10/10
Confidence
100%
Reports
19
Location
CN
CN
125.94.109.237
10/10
Confidence
99%
Reports
15
Location
CN
CN
125.77.73.145
8/10
Confidence
99%
Reports
13
Location
CN
CN
121.227.31.13
10/10
Confidence
98%
Reports
47
Location
CN
CN
220.180.119.22
8/10
Confidence
97%
Reports
13
Location
CN
CN
113.240.235.254
10/10
Confidence
96%
Reports
71
Location
CN
CN
218.84.194.30
10/10
Confidence
96%
Reports
50
Location
CN
CN
183.6.72.120
10/10
Confidence
96%
Reports
36
Location
CN
CN
183.162.254.237
10/10
Confidence
96%
Reports
29
Location
CN
CN
119.145.129.77
10/10
Confidence
96%
Reports
22
Location
CN
CN
182.149.104.197
10/10
Confidence
96%
Reports
11
Location
CN
CN
106.117.223.223
10/10
Confidence
94%
Reports
30
Location
CN
CN
218.17.240.5
10/10
Confidence
94%
Reports
29
Location
CN
CN
61.183.86.2
10/10
Confidence
94%
Reports
24
Location
CN
CN
106.117.214.50
8/10
Confidence
93%
Reports
27
Location
CN
CN
125.91.35.169
10/10
Confidence
93%
Reports
24
Location
CN
CN
58.221.60.25
10/10
Confidence
92%
Reports
170
Location
CN
CN
58.209.82.184
10/10
Confidence
92%
Reports
51
Location
CN
CN
182.244.5.153
10/10
Confidence
91%
Reports
44
Location
CN
CN
IPs from the same subnet range, likely same network segment.
2
Related IPs
8/10
Avg Threat
40%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
27.128.171.39
10/10
Confidence
100%
Reports
33
ISP
Chinanet
211.101.247.196
10/10
Confidence
100%
Reports
28
ISP
Cloud Computing...
118.121.202.149
10/10
Confidence
100%
Reports
21
ISP
CHINANET SiChua...
27.155.120.131
10/10
Confidence
100%
Reports
20
ISP
Fuzhou
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
112.123.228.180
10/10
Confidence
100%
Reports
18
ISP
CHINA UNICOM Ch...
118.145.246.44
10/10
Confidence
100%
Reports
18
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
15
ISP
China Networks ...
120.48.170.74
10/10
Confidence
100%
Reports
14
ISP
Beijing Baidu N...
220.250.52.101
8/10
Confidence
100%
Reports
14
ISP
CHINA UNICOM Ch...
117.50.70.169
8/10
Confidence
100%
Reports
13
ISP
China Unicom Be...
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
14.103.110.123
10/10
Confidence
100%
Reports
13
ISP
China Telecom G...
203.56.198.45
10/10
Confidence
99%
Reports
30
ISP
Sichuan Chuanxn...
42.51.42.209
10/10
Confidence
99%
Reports
24
ISP
Zhengzhou Fasti...
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
34.181.236.218
10/10
Confidence
63%
Reports
5
Location
US
US
103.191.123.106
10/10
Confidence
63%
Reports
5
Location
PK
PK
103.167.195.228
10/10
Confidence
63%
Reports
5
Location
IN
IN
84.54.58.141
10/10
Confidence
63%
Reports
7
Location
RU
RU
143.44.140.204
10/10
Confidence
63%
Reports
5
Location
PH
PH
2405:201:3017:c01b:3016:9924:c540:5ff3
10/10
Confidence
63%
Reports
5
Location
IN
IN
106.219.145.18
10/10
Confidence
63%
Reports
5
Location
IN
IN
43.166.255.15
10/10
Confidence
63%
Reports
7
Location
US
US
49.36.222.161
10/10
Confidence
63%
Reports
5
Location
IN
IN
94.131.93.99
10/10
Confidence
63%
Reports
7
Location
KZ
KZ
37.186.52.211
10/10
Confidence
63%
Reports
5
Location
QA
QA
45.198.224.232
10/10
Confidence
63%
Reports
7
Location
US
US
45.198.224.236
10/10
Confidence
63%
Reports
7
Location
US
US
76.151.151.216
10/10
Confidence
63%
Reports
5
Location
US
US
151.243.11.202
10/10
Confidence
63%
Reports
7
Location
AE
AE