Notable Threat
IP 143.20.112.103 rated 7/10 from 14 verified reports.
Multiple security incidents attributed to this IP. Confidence: 91%.
More threatening than 88% of monitored IPs
IP Address
143.20.112.103
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
United States
Location
LocLix
ASN 207590
14
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
14
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
23. October 2026
Last Activity
26. October 2026
Recent (7 days)
14 incidents
Reputable Network
This IP is hosted on a network (ASN 207590) with generally good reputation. The ISP LocLix maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
6/10
Moderate
Confidence Score
91%
Verified
Confidence History
23. Oct 2026 - 26. Oct 2026
91%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Fraud VoIP | Honeypot | 75% |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 143.20.112.103
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
US
- ASN
- AS207590
- ISP
- LocLix
DNS Information
- Reverse DNS
- 103.112.20.143.public-cloud.as207590.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 14
- First Reported
- 26 Oct 2026
- Last Reported
- 26 Oct 2026, 01:23
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,265,091 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
14
avg: 7
++
Network Comparison
Compared against 8 IPs in ASN 207590
Threat Level
7/10
network avg: 6.6
=
Total Reports
14
network avg: 9
++
Geographic Comparison
Compared against 195,279 IPs in US
Threat Level
7/10
country avg: 6.6
=
Total Reports
14
country avg: 16
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
23 Oct 2026
8 reports
Daily Average
0.5
reports/day
Most Active
Friday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
14
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,152,420 threat incidents tracked globally • Last 24h: 31,257 Logs
FEED
Top Threat Sources
-
01
Brazil257,590 22.4% -
02
United States195,577 17%
-
03
India99,483 8.6% -
04
China48,822 4.2% -
05
Argentina41,671 3.6% -
06
SC29,369 2.5% -
07
Mexico27,126 2.4% -
08
Russia25,990 2.3% -
09
Colombia23,937 2.1% -
10
Germany21,717 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
7
Related IPs
6.6/10
Avg Threat
36%
Avg Confidence
3
High Threat
Elevated risk: Multiple related IPs are flagged
94.154.1.123
8/10
Confidence
63%
Reports
46
Location
DE
DE
94.154.1.38
7/10
Confidence
50%
Reports
4
Location
DE
DE
94.154.1.71
7/10
Confidence
34%
Reports
2
Location
DE
DE
94.154.1.107
6/10
Confidence
33%
Reports
2
Location
DE
DE
94.154.1.63
6/10
Confidence
25%
Reports
1
Location
DE
DE
96.62.101.89
6/10
Confidence
25%
Reports
1
Location
US
US
2.56.2.240
6/10
Confidence
25%
Reports
1
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
136.70.67.198
8/10
Confidence
100%
Reports
80
ISP
Google LLC
35.196.98.155
8/10
Confidence
100%
Reports
53
ISP
Google LLC
104.28.201.73
10/10
Confidence
100%
Reports
40
ISP
Cloudflare, Inc.
166.62.41.13
10/10
Confidence
100%
Reports
33
ISP
GoDaddy.com, LLC
77.239.124.46
10/10
Confidence
100%
Reports
27
ISP
Banatsync Srl
199.19.225.232
10/10
Confidence
100%
Reports
25
ISP
FranTech Solutions
34.139.102.100
8/10
Confidence
100%
Reports
23
ISP
Google LLC
104.28.228.78
10/10
Confidence
100%
Reports
22
ISP
Cloudflare, Inc.
165.154.162.74
10/10
Confidence
100%
Reports
21
ISP
UCLOUD INFORMAT...
104.28.228.77
8/10
Confidence
100%
Reports
21
ISP
Cloudflare, Inc.
35.252.168.18
8/10
Confidence
100%
Reports
20
ISP
Google LLC
104.28.196.78
10/10
Confidence
100%
Reports
20
ISP
Cloudflare, Inc.
35.254.136.149
10/10
Confidence
100%
Reports
19
ISP
Google LLC
34.59.15.171
8/10
Confidence
100%
Reports
18
ISP
Google LLC
2602:fa59:10:c38::1
10/10
Confidence
100%
Reports
18
ISP
RouterHosting LLC
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.108.9.250
7/10
Confidence
91%
Reports
24
Location
NL
NL
91.108.9.120
7/10
Confidence
91%
Reports
23
Location
NL
NL
91.108.9.50
7/10
Confidence
91%
Reports
24
Location
NL
NL
91.108.9.183
7/10
Confidence
91%
Reports
21
Location
NL
NL
31.24.80.50
7/10
Confidence
91%
Reports
33
Location
FR
FR
5.250.182.200
8/10
Confidence
91%
Reports
206
Location
FR
FR
91.108.13.26
7/10
Confidence
91%
Reports
16
Location
VG
VG
91.108.9.84
7/10
Confidence
91%
Reports
20
Location
NL
NL
2.57.122.168
10/10
Confidence
91%
Reports
339
Location
RO
RO
145.239.236.30
7/10
Confidence
91%
Reports
20
91.108.9.148
7/10
Confidence
91%
Reports
30
Location
NL
NL
91.108.9.105
7/10
Confidence
91%
Reports
21
Location
NL
NL
91.108.9.69
7/10
Confidence
91%
Reports
25
Location
NL
NL
91.108.9.23
7/10
Confidence
91%
Reports
23
Location
NL
NL
178.153.174.27
8/10
Confidence
91%
Reports
18
Location
QA
QA