Substantial Risk
Threat level 8/10 for 121.227.152.250 based on 29 documented incidents.
Consistent suspicious behavior patterns. 83% confidence rating.
More threatening than 90% of monitored IPs
IP Address
121.227.152.250
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
Chinanet
ASN 4134
29
Reports
Mixed
Data Source
Threat Categories
SSH
29
Brute-Force
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
4. September 2026
Last Activity
30. September 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 4134) with generally good reputation. The ISP Chinanet maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
83%
Verified
Confidence History
18. Feb 2026 - 30. Sep 2026
83%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 121.227.152.250
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS4134
- ISP
- Chinanet
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 18 Feb 2026
- Last Reported
- 30 Sep 2026, 08:10
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4134
Chinanet
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
8,261
Total IPs Monitored
33,059
Total Reports
4
Reports per IP
Network Context
This IP address belongs to Chinanet (AS4134), which manages 8,261 IP addresses in our monitoring system. Out of these, 33,059 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 812,899 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
29
avg: 9
++
Network Comparison
Compared against 14,684 IPs in ASN 4134
Threat Level
8/10
network avg: 7.4
=
Total Reports
29
network avg: 3
++
Network Chinanet has overall threat level 3/10
Geographic Comparison
Compared against 45,118 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
29
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Sep 2026
2 reports
Daily Average
0.2
reports/day
Most Active
Tuesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
29
Brute-Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 12:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
739,104 threat incidents tracked globally • Last 24h: 44,399 Logs
FEED
Top Threat Sources
-
01
United States144,521 19.6% -
02
Brazil111,037 15%
-
03
India83,187 11.3%
-
04
China45,118 6.1%
-
05
SC29,242 4%
-
06
Germany17,720 2.4%
-
07
Netherlands17,580 2.4%
-
08
Pakistan16,896 2.3%
-
09
Argentina16,211 2.2%
-
10
Colombia15,149 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
202.101.144.44
10/10
Confidence
100%
Reports
19
Location
CN
CN
125.94.109.237
10/10
Confidence
100%
Reports
15
Location
CN
CN
183.129.148.70
10/10
Confidence
98%
Reports
42
Location
CN
CN
113.240.235.254
10/10
Confidence
96%
Reports
69
Location
CN
CN
218.84.194.30
10/10
Confidence
96%
Reports
48
Location
CN
CN
183.6.72.120
10/10
Confidence
96%
Reports
36
Location
CN
CN
183.162.254.237
10/10
Confidence
96%
Reports
29
Location
CN
CN
119.145.129.77
10/10
Confidence
96%
Reports
22
Location
CN
CN
121.227.31.13
10/10
Confidence
95%
Reports
44
Location
CN
CN
106.117.223.223
10/10
Confidence
94%
Reports
30
Location
CN
CN
218.17.240.5
10/10
Confidence
94%
Reports
28
Location
CN
CN
61.183.86.2
10/10
Confidence
94%
Reports
24
Location
CN
CN
27.128.171.39
10/10
Confidence
93%
Reports
27
Location
CN
CN
106.117.214.50
8/10
Confidence
93%
Reports
27
Location
CN
CN
202.107.164.66
10/10
Confidence
93%
Reports
13
Location
CN
CN
222.220.102.32
10/10
Confidence
92%
Reports
12
Location
CN
CN
125.91.35.169
10/10
Confidence
91%
Reports
21
Location
CN
CN
58.221.60.25
10/10
Confidence
90%
Reports
147
Location
CN
CN
14.29.214.161
10/10
Confidence
90%
Reports
77
Location
CN
CN
58.209.82.184
10/10
Confidence
90%
Reports
49
Location
CN
CN
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
77%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
42.51.42.209
10/10
Confidence
100%
Reports
24
ISP
Zhengzhou Fasti...
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
112.123.228.180
10/10
Confidence
100%
Reports
17
ISP
CHINA UNICOM Ch...
122.114.69.235
8/10
Confidence
100%
Reports
16
ISP
CHINA UNICOM Ch...
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
203.56.198.45
10/10
Confidence
98%
Reports
26
ISP
Sichuan Chuanxn...
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
IPs with similar threat level and confidence scores.
15
Related IPs
9/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.131.220.121
8/10
Confidence
83%
Reports
2,773
Location
US
US
37.148.134.161
10/10
Confidence
83%
Reports
1,305
Location
BR
BR
167.94.146.51
8/10
Confidence
83%
Reports
1,070
Location
US
US
192.253.248.229
7/10
Confidence
83%
Reports
856
Location
IR
IR
216.218.206.69
8/10
Confidence
83%
Reports
698
Location
US
US
185.193.240.246
10/10
Confidence
83%
Reports
571
Location
MK
MK
23.175.50.52
10/10
Confidence
83%
Reports
529
Location
US
US
5.181.86.188
8/10
Confidence
83%
Reports
466
Location
UA
UA
91.196.152.208
10/10
Confidence
83%
Reports
390
Location
FR
FR
91.196.152.177
10/10
Confidence
83%
Reports
375
Location
FR
FR
91.196.152.213
10/10
Confidence
83%
Reports
327
Location
FR
FR
171.25.158.47
10/10
Confidence
83%
Reports
308
Location
SE
SE
66.132.172.136
8/10
Confidence
83%
Reports
306
Location
US
US
195.184.76.236
10/10
Confidence
83%
Reports
305
Location
US
US
66.132.172.205
8/10
Confidence
83%
Reports
301
Location
US
US