Critical Alert
Security alert: 118.122.147.49 rated 10/10 based on 43 verified incidents.
Threat profile indicates sustained malicious activity with 66% confidence rating.
More threatening than 98% of monitored IPs
IP Address
118.122.147.49
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CN
Location
CHINANET SiChuan Telecom ...
ASN 38283
43
Reports
Honeypot
Data Source
Threat Categories
SSH
25
Hacking
9
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
18. September 2026
Last Activity
18. September 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 38283) with generally good reputation. The ISP CHINANET SiChuan Telecom Internet Data Center maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
66%
High Confidence
Confidence History
26. Feb 2026 - 18. Sep 2026
66%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 118.122.147.49
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS38283
- ISP
- CHINANET SiChuan Telecom Internet Data Center
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 43
- First Reported
- 22 Feb 2026
- Last Reported
- 18 Sep 2026, 05:04
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS38283
CHINANET SiChuan Telecom Internet Data Center
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
19
Total IPs Monitored
322
Total Reports
16.9
Reports per IP
Network Context
This IP address belongs to CHINANET SiChuan Telecom Internet Data Center (AS38283), which manages 19 IP addresses in our monitoring system. Out of these, 322 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 805,946 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
43
avg: 9
++
Network Comparison
Compared against 55 IPs in ASN 38283
Threat Level
10/10
network avg: 7.9
+
Total Reports
43
network avg: 9
++
Network CHINANET SiChuan Telecom Internet Data Center has overall threat level 3/10
Geographic Comparison
Compared against 44,715 IPs in CN
Threat Level
10/10
country avg: 7.4
+
Total Reports
43
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Tuesday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
38
Hacking
9
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
732,959 threat incidents tracked globally • Last 24h: 29,233 Logs
FEED
Top Threat Sources
-
01
United States143,148 19.5% -
02
Brazil110,706 15.1%
-
03
India82,092 11.2%
-
04
China44,715 6.1%
-
05
SC29,233 4%
-
06
Germany17,451 2.4%
-
07
Netherlands17,448 2.4%
-
08
Pakistan16,608 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.2/10
Avg Threat
37%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
118.121.202.149
10/10
Confidence
100%
Reports
17
Location
CN
CN
118.122.147.195
10/10
Confidence
87%
Reports
32
Location
CN
CN
171.220.244.134
10/10
Confidence
82%
Reports
30
Location
CN
CN
211.149.143.207
8/10
Confidence
49%
Reports
3
Location
CN
CN
221.236.21.62
10/10
Confidence
47%
Reports
6
Location
CN
CN
110.185.106.161
10/10
Confidence
43%
Reports
10
Location
CN
CN
221.236.21.55
10/10
Confidence
36%
Reports
40
Location
CN
CN
60.247.154.77
7/10
Confidence
30%
Reports
1
Location
CN
CN
60.247.206.8
5/10
Confidence
27%
Reports
8
Location
CN
CN
182.151.52.107
7/10
Confidence
24%
Reports
1
Location
CN
CN
60.247.206.40
4/10
Confidence
23%
Reports
1
Location
CN
CN
211.149.174.83
6/10
Confidence
23%
Reports
1
Location
CN
CN
60.247.206.11
4/10
Confidence
23%
Reports
1
Location
CN
CN
60.247.206.49
4/10
Confidence
23%
Reports
1
Location
CN
CN
211.149.161.6
4/10
Confidence
23%
Reports
1
Location
CN
CN
118.123.240.135
4/10
Confidence
23%
Reports
1
Location
CN
CN
60.247.206.13
4/10
Confidence
23%
Reports
1
Location
CN
CN
211.149.167.134
6/10
Confidence
22%
Reports
1
Location
CN
CN
171.217.254.59
10/10
Confidence
13%
Reports
3
Location
CN
CN
211.149.227.24
10/10
Confidence
12%
Reports
23
Location
CN
CN
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
87%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
202.101.144.44
10/10
Confidence
100%
Reports
16
ISP
Chinanet
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
222.220.102.32
10/10
Confidence
100%
Reports
12
ISP
Chinanet
203.56.198.45
10/10
Confidence
99%
Reports
26
ISP
Sichuan Chuanxn...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
112.123.228.180
10/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
101.96.214.98
10/10
Confidence
98%
Reports
14
ISP
Beijing Volcano...
118.196.119.108
8/10
Confidence
98%
Reports
12
ISP
China Telecom (...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
66%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
178.16.54.226
10/10
Confidence
66%
Reports
2,049
Location
NL
NL
93.152.208.26
8/10
Confidence
66%
Reports
1,850
Location
BG
BG
77.91.118.50
8/10
Confidence
66%
Reports
1,672
Location
RU
RU
160.119.71.12
8/10
Confidence
66%
Reports
1,280
Location
SC
SC
85.217.149.25
10/10
Confidence
66%
Reports
994
Location
CA
CA
165.154.33.91
10/10
Confidence
66%
Reports
815
Location
PH
PH
85.217.140.3
8/10
Confidence
66%
Reports
584
Location
FR
FR
91.110.219.46
10/10
Confidence
66%
Reports
577
Location
US
US
45.84.107.17
8/10
Confidence
66%
Reports
456
Location
SE
SE
203.121.106.56
8/10
Confidence
66%
Reports
342
Location
MY
MY
103.177.15.14
10/10
Confidence
66%
Reports
311
Location
ID
ID
45.84.107.33
7/10
Confidence
66%
Reports
253
Location
SE
SE
165.154.162.102
8/10
Confidence
66%
Reports
232
Location
US
US
193.24.211.204
10/10
Confidence
66%
Reports
231
Location
DE
DE
85.217.149.29
10/10
Confidence
66%
Reports
214
Location
CA
CA