Critical Alert
Security alert: 14.103.115.237 rated 10/10 based on 14 verified incidents.
Threat profile indicates sustained malicious activity with 21% confidence rating.
More threatening than 95% of monitored IPs
IP Address
14.103.115.237
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CN
Location
China Telecom Group
ASN 4811
14
Reports
Honeypot
Data Source
Threat Categories
SSH
8
Hacking
7
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 4811) with generally good reputation. The ISP China Telecom Group maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
19%
Low Confidence
Confidence History
24. Feb 2026 - 26. Jul 2026
21%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 14.103.115.237
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS4811
- ISP
- China Telecom Group
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 24 Feb 2026
- Last Reported
- 26 Jul 2026, 08:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4811
China Telecom Group
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
499
Total IPs Monitored
7,881
Total Reports
15.8
Reports per IP
Network Context
This IP address belongs to China Telecom Group (AS4811), which manages 499 IP addresses in our monitoring system. Out of these, 7,881 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
95
%
Global Threat Ranking
This IP is more threatening than 95% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 810,338 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
14
avg: 9
++
Network Comparison
Compared against 625 IPs in ASN 4811
Threat Level
10/10
network avg: 8.5
+
Total Reports
14
network avg: 16
=
Network China Telecom Group has overall threat level 2/10
Geographic Comparison
Compared against 44,948 IPs in CN
Threat Level
10/10
country avg: 7.4
+
Total Reports
14
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
8
Hacking
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
736,828 threat incidents tracked globally • Last 24h: 32,725 Logs
FEED
Top Threat Sources
-
01
United States144,008 19.5% -
02
Brazil110,889 15%
-
03
India82,832 11.2%
-
04
China44,948 6.1%
-
05
SC29,241 4%
-
06
Germany17,642 2.4%
-
07
Netherlands17,550 2.4%
-
08
Pakistan16,808 2.3%
-
09
Argentina16,197 2.2%
-
10
Colombia15,142 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
87%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
118.196.142.135
10/10
Confidence
100%
Reports
16
Location
CN
CN
118.196.119.108
8/10
Confidence
96%
Reports
12
Location
CN
CN
118.196.36.59
8/10
Confidence
92%
Reports
30
Location
CN
CN
118.196.86.5
10/10
Confidence
92%
Reports
11
Location
CN
CN
14.103.118.61
10/10
Confidence
91%
Reports
17
Location
CN
CN
118.196.68.35
8/10
Confidence
91%
Reports
12
Location
CN
CN
101.89.141.184
10/10
Confidence
90%
Reports
378
Location
CN
CN
14.103.107.229
10/10
Confidence
89%
Reports
22
Location
CN
CN
114.80.39.74
8/10
Confidence
89%
Reports
9
Location
CN
CN
101.89.76.249
10/10
Confidence
88%
Reports
20
Location
CN
CN
14.103.118.150
10/10
Confidence
85%
Reports
22
Location
CN
CN
14.103.115.253
8/10
Confidence
84%
Reports
25
Location
CN
CN
14.103.117.73
8/10
Confidence
84%
Reports
21
Location
CN
CN
218.78.46.81
8/10
Confidence
83%
Reports
24
Location
CN
CN
14.103.118.140
10/10
Confidence
82%
Reports
13
Location
CN
CN
14.103.110.123
8/10
Confidence
81%
Reports
9
Location
CN
CN
61.151.249.194
10/10
Confidence
80%
Reports
68
Location
CN
CN
14.103.108.102
10/10
Confidence
79%
Reports
26
Location
CN
CN
14.103.107.221
10/10
Confidence
78%
Reports
42
Location
CN
CN
14.103.118.197
10/10
Confidence
78%
Reports
31
Location
CN
CN
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.9/10
Avg Threat
25%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
14.103.115.253
8/10
Confidence
84%
Reports
25
Location
CN
CN
14.103.115.182
10/10
Confidence
78%
Reports
16
Location
CN
CN
14.103.115.25
10/10
Confidence
76%
Reports
22
Location
CN
CN
14.103.115.115
10/10
Confidence
65%
Reports
8
Location
CN
CN
14.103.115.54
10/10
Confidence
23%
Reports
20
Location
CN
CN
14.103.115.106
10/10
Confidence
23%
Reports
17
Location
CN
CN
14.103.115.210
10/10
Confidence
18%
Reports
11
Location
CN
CN
14.103.115.225
10/10
Confidence
18%
Reports
11
Location
CN
CN
14.103.115.208
10/10
Confidence
17%
Reports
11
Location
CN
CN
14.103.115.3
10/10
Confidence
16%
Reports
10
Location
CN
CN
14.103.115.213
10/10
Confidence
13%
Reports
21
Location
CN
CN
14.103.115.156
10/10
Confidence
12%
Reports
7
Location
CN
CN
14.103.115.181
10/10
Confidence
11%
Reports
7
Location
CN
CN
14.103.115.124
10/10
Confidence
9%
Reports
9
Location
CN
CN
14.103.115.85
10/10
Confidence
6%
Reports
7
Location
CN
CN
14.103.115.80
10/10
Confidence
5%
Reports
19
Location
CN
CN
14.103.115.117
10/10
Confidence
4%
Reports
26
Location
CN
CN
14.103.115.212
10/10
Confidence
4%
Reports
9
Location
CN
CN
14.103.115.233
10/10
Confidence
4%
Reports
8
Location
CN
CN
14.103.115.5
10/10
Confidence
4%
Reports
5
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
222.220.102.32
10/10
Confidence
100%
Reports
12
ISP
Chinanet
203.56.198.45
10/10
Confidence
99%
Reports
26
ISP
Sichuan Chuanxn...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
122.114.69.235
8/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
112.123.228.180
10/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
IPs with similar threat level and confidence scores.
15
Related IPs
9/10
Avg Threat
21%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.34
8/10
Confidence
21%
Reports
1,846
Location
RO
RO
80.94.92.68
10/10
Confidence
21%
Reports
1,487
Location
RO
RO
106.75.188.200
10/10
Confidence
21%
Reports
978
Location
CN
CN
46.149.191.249
10/10
Confidence
21%
Reports
423
Location
UA
UA
172.86.126.18
8/10
Confidence
21%
Reports
320
Location
US
US
94.156.232.241
8/10
Confidence
21%
Reports
310
Location
DE
DE
94.156.232.235
8/10
Confidence
21%
Reports
293
Location
DE
DE
136.59.160.8
10/10
Confidence
21%
Reports
275
Location
US
US
172.113.203.216
10/10
Confidence
21%
Reports
257
Location
US
US
45.5.102.93
10/10
Confidence
21%
Reports
247
Location
BR
BR
213.209.159.113
8/10
Confidence
21%
Reports
218
Location
TW
TW
151.240.101.12
7/10
Confidence
21%
Reports
181
Location
US
US
144.172.100.177
8/10
Confidence
21%
Reports
181
Location
US
US
45.5.110.214
10/10
Confidence
21%
Reports
170
Location
BR
BR
35.205.162.235
10/10
Confidence
21%
Reports
164
Location
BE
BE