Notable Threat
IP 120.33.126.224 rated 8/10 from 64 verified reports.
Multiple security incidents attributed to this IP. Confidence: 99%.
More threatening than 91% of monitored IPs
IP Address
120.33.126.224
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
Chinanet
ASN 4134
64
Reports
Honeypot
Data Source
Threat Categories
Brute-Force
30
SSH
30
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
15. September 2026
Last Activity
19. September 2026
Recent (7 days)
13 incidents
Reputable Network
This IP is hosted on a network (ASN 4134) with generally good reputation. The ISP Chinanet maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
99%
Verified
Confidence History
10. Aug 2026 - 19. Sep 2026
99%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 120.33.126.224
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS4134
- ISP
- Chinanet
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 64
- First Reported
- 12 Mar 2026
- Last Reported
- 19 Sep 2026, 12:57
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4134
Chinanet
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
8,261
Total IPs Monitored
33,059
Total Reports
4
Reports per IP
Network Context
This IP address belongs to Chinanet (AS4134), which manages 8,261 IP addresses in our monitoring system. Out of these, 33,059 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
91
%
Global Threat Ranking
This IP is more threatening than 91% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 767,190 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
64
avg: 9
++
Network Comparison
Compared against 14,166 IPs in ASN 4134
Threat Level
8/10
network avg: 5.2
++
Total Reports
64
network avg: 3
++
Network Chinanet has overall threat level 3/10
Geographic Comparison
Compared against 43,100 IPs in CN
Threat Level
8/10
country avg: 5.5
+
Total Reports
64
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 Sep 2026
11 reports
Daily Average
0.4
reports/day
Most Active
Sunday
24 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
61
SSH
61
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 20:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
697,897 threat incidents tracked globally • Last 24h: 22,560 Logs
FEED
Top Threat Sources
-
01
United States134,790 19.3% -
02
Brazil109,413 15.7%
-
03
India75,774 10.9%
-
04
China43,099 6.2%
-
05
SC29,184 4.2%
-
06
Netherlands16,467 2.4%
-
07
Argentina16,066 2.3%
-
08
Germany15,801 2.3%
-
09
Pakistan15,194 2.2%
-
10
Colombia15,076 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
110.191.179.174
10/10
Confidence
100%
Reports
103
Location
CN
CN
27.18.114.8
10/10
Confidence
100%
Reports
61
Location
CN
CN
60.183.142.51
10/10
Confidence
100%
Reports
16
Location
CN
CN
49.77.24.228
10/10
Confidence
100%
Reports
16
Location
CN
CN
125.94.109.237
10/10
Confidence
100%
Reports
14
Location
CN
CN
202.107.164.66
10/10
Confidence
100%
Reports
13
Location
CN
CN
183.63.218.104
10/10
Confidence
99%
Reports
85
Location
CN
CN
219.150.17.250
10/10
Confidence
99%
Reports
52
Location
CN
CN
113.222.189.88
8/10
Confidence
99%
Reports
31
Location
CN
CN
182.37.0.190
10/10
Confidence
99%
Reports
21
Location
CN
CN
117.88.237.10
10/10
Confidence
99%
Reports
20
Location
CN
CN
220.180.76.50
10/10
Confidence
98%
Reports
95
Location
CN
CN
183.129.148.70
10/10
Confidence
98%
Reports
42
Location
CN
CN
218.75.108.154
10/10
Confidence
98%
Reports
37
Location
CN
CN
183.47.48.90
10/10
Confidence
98%
Reports
37
Location
CN
CN
218.90.138.78
10/10
Confidence
98%
Reports
28
Location
CN
CN
180.109.94.132
10/10
Confidence
98%
Reports
26
Location
CN
CN
59.52.253.47
10/10
Confidence
98%
Reports
26
Location
CN
CN
221.234.36.123
10/10
Confidence
98%
Reports
24
Location
CN
CN
183.23.133.137
10/10
Confidence
98%
Reports
22
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.11.230.160
10/10
Confidence
100%
Reports
172
ISP
China Mobile co...
8.148.185.187
10/10
Confidence
100%
Reports
126
ISP
Hangzhou Alibab...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
97
ISP
China Unicom IP...
114.247.140.114
10/10
Confidence
100%
Reports
75
ISP
China Unicom Be...
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
14.103.127.3
10/10
Confidence
100%
Reports
51
ISP
China Telecom G...
139.198.113.29
10/10
Confidence
100%
Reports
46
ISP
Cloud Computing...
180.164.45.181
10/10
Confidence
100%
Reports
46
ISP
China Telecom G...
111.186.59.252
10/10
Confidence
100%
Reports
42
ISP
China Education...
36.111.32.237
8/10
Confidence
100%
Reports
41
ISP
China Telecom
111.9.47.89
10/10
Confidence
100%
Reports
35
ISP
China Mobile Co...
106.13.228.234
10/10
Confidence
100%
Reports
33
ISP
Beijing Baidu N...
112.4.79.138
10/10
Confidence
100%
Reports
31
ISP
China Mobile co...
116.228.233.93
10/10
Confidence
100%
Reports
29
ISP
China Telecom G...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.198.224.141
8/10
Confidence
99%
Reports
492
Location
US
US
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
141.98.11.11
8/10
Confidence
99%
Reports
298
Location
LT
LT
119.18.55.118
10/10
Confidence
99%
Reports
264
Location
IN
IN
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
5.83.135.249
8/10
Confidence
99%
Reports
169
Location
DE
DE
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP
87.121.84.81
8/10
Confidence
99%
Reports
152
Location
US
US
121.168.139.251
10/10
Confidence
99%
Reports
146
Location
KR
KR
103.75.185.95
8/10
Confidence
99%
Reports
140
Location
VN
VN
38.95.35.85
8/10
Confidence
99%
Reports
133
Location
US
US
39.115.195.164
10/10
Confidence
99%
Reports
118
Location
KR
KR
196.189.237.92
10/10
Confidence
99%
Reports
111
Location
ET
ET
Analyzed high-risk IP addresses
- 51.68.207.118
- 66.132.172.175
- 66.132.172.165
- 66.132.172.164
- 66.132.172.172
- 66.132.172.174
- 66.132.172.173
- 66.132.172.170
- 207.90.244.11
- 176.65.148.84
- 193.32.162.28
- 80.94.92.183
- 18.116.101.220
- 192.161.49.2
- 18.218.118.203
- 3.129.187.38
- 85.215.239.226
- 46.151.178.13
- 45.198.224.18
- 87.251.64.146
- 45.205.1.5
- 5.61.209.224
- 5.187.35.26
- 3.130.168.2