Skip to main content Skip to footer

IP Address

202.189.4.115

IPv4 Public

CN

AS139180

Shandong eshinton Network Technology Co., Ltd.

9 Reports

Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

China Location

Shandong eshinton Network... ASN 139180

9 Reports

Honeypot Data Source

Critical Alert

Security alert: 202.189.4.115 rated 10/10 based on 9 verified incidents.

Threat profile indicates sustained malicious activity with 24% confidence rating.

More threatening than 95% of monitored IPs

Threat Categories

Hacking 9

SSH 4

Exploited Host 1

Technical Details

General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.

Recommended Mitigations

Keep systems patched, implement intrusion detection, and follow security best practices.

Reputable Network

This IP is hosted on a network (ASN 139180) with generally good reputation. The ISP Shandong eshinton Network Technology Co., Ltd. maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement immediate countermeasures. Well-resourced threat actor identified.

Continue monitoring for emerging patterns.

Reputation Summary

Threat Level 10/10 Critical

Critical

Activity Frequency 0/10 Inactive

Confidence Score 22% Low Confidence

Confidence History

17. Aug 2026 - 20. Aug 2026

24% Current

Stable Trend

Date	Categories	Source	Confidence
20. Aug 2026	Hacking	Honeypot	75%
19. Aug 2026	Hacking SSH	Honeypot x2	75%
19. Aug 2026	Hacking Exploited Host	Honeypot x2	75%
19. Aug 2026	Hacking SSH	Honeypot x2	75%
19. Aug 2026	Hacking SSH	Honeypot x2	75%
19. Aug 2026	Hacking SSH	Honeypot x2	75%
19. Aug 2026	Hacking	Honeypot	75%
17. Aug 2026	Hacking	Honeypot	75%
17. Aug 2026	Hacking	Honeypot	75%

Basic Information

IP Address: 202.189.4.115
IP Version: IPv4
Network Type: Public
Tor Network: No
Network Class: Class C

Geolocation

Country: CN
ASN: AS139180
ISP: Shandong eshinton Network Technology Co., Ltd.

DNS Information

Reverse DNS: None
PTR Record: No
Connection Type: Static

Statistics

Total Reports: 9
First Reported: 17 Aug 2026
Last Reported: 20 Aug 2026, 10:24

Comparative Analysis

How this IP compares to others in our threat intelligence database

95 %

Global Threat Ranking

This IP is more threatening than 95% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 839,244 reported IPs worldwide

Threat Level 10/10 avg: 6.3 ++

Total Reports 9 avg: 9 =

Network Comparison

Compared against 21 IPs in ASN 139180

Threat Level 10/10 network avg: 7.6 +

Total Reports 9 network avg: 4 ++

Geographic Comparison

Compared against 46,287 IPs in CN

Threat Level 10/10 country avg: 7.4 +

Total Reports 9 country avg: 5 ++

Daily report activity over the last 30 days showing patterns and peaks.

Peak Day 0 reports

Daily Average 0 reports/day

Most Active Wednesday 6 reports

Evolution of threat level over time based on reported categories and frequency.

Initial Threat 6/10

Current Threat 6/10

Distribution of threat categories reported over time.

Top Threat Categories

Hacking 9

SSH 4

Exploited Host 1

Activity patterns showing when this IP is most active during the day and week.

Hourly Activity

Peak activity at 00:00 with 3 reports

Weekly Activity

Geographic Threat Distribution

762,905 threat incidents tracked globally • Last 24h: 30,394 Logs

FEED

Top Threat Sources

01

United States US

149,226 19.6%
02

Brazil BR

112,183 14.7%
03

India IN

88,369 11.6%
04

China CN THIS IP

46,287 6.1%
05

SC SC

29,255 3.8%
06

Germany DE

18,578 2.4%
07

Netherlands NL

18,119 2.4%
08

Pakistan PK

18,058 2.4%
09

Argentina AR

16,372 2.1%
10

Colombia CO

15,212 2%

+40 more countries

THREAT LEVEL

LOW MED HIGH

IPs from the same Autonomous System (AS) network provider.

20 Related IPs

7.5/10 Avg Threat

20% Avg Confidence

20 High Threat

High-risk network: Majority of related IPs are flagged

IPs from the same subnet range, likely same network segment.

1 Related IPs

7/10 Avg Threat

16% Avg Confidence

1 High Threat

High-risk network: Majority of related IPs are flagged

IPs from the same country with similar threat profiles.

15 Related IPs

9.7/10 Avg Threat

100% Avg Confidence

15 High Threat

High-risk network: Majority of related IPs are flagged

Confidence 100%

Confidence 100%

ISP Cloud Computing...

Confidence 100%

ISP CHINANET SiChua...

Confidence 100%

Confidence 100%

ISP CHINA UNICOM Ch...

Confidence 100%

ISP Beijing Volcano...

Confidence 100%

ISP China Networks ...

Confidence 100%

ISP Beijing Baidu N...

Confidence 100%

ISP China Unicom Be...

Confidence 100%

ISP China Telecom G...

ISP Sichuan Chuanxn...

ISP Zhengzhou Fasti...

ISP Beijing Volcano...

ISP CHINA UNICOM Ch...

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "202.189.4.115",
    "threat_level": 10,
    "confidence_score": 24,
    "total_reports": 9,
    "country_code": "CN",
    "isp_name": "Shandong eshinton Network Technology Co., Ltd.",
    "asn": "139180",
    "first_reported": "2026-08-17 04:45:04",
    "last_reported": "2026-08-20 10:24:48",
    "exported_at": "2026-10-09T08:27:58+02:00",
    "source": "https://reportedip.com/ip/202.189.4.115/"
}

Firewall Rules

Ready-to-use blocking rules for common firewall systems.

iptables / netfilter

iptables -A INPUT -s 202.189.4.115 -j DROP
iptables -A OUTPUT -d 202.189.4.115 -j DROP

UFW (Ubuntu)

ufw deny from 202.189.4.115
ufw deny to 202.189.4.115

Windows Firewall

netsh advfirewall firewall add rule name="Block 202.189.4.115" dir=in action=block remoteip=202.189.4.115
netsh advfirewall firewall add rule name="Block 202.189.4.115 Out" dir=out action=block remoteip=202.189.4.115

Cloudflare

# Cloudflare Firewall Rule (IP Access Rules)
# Action: Block
# IP Address: 202.189.4.115

nginx

# Add to server block or location
deny 202.189.4.115;

Apache .htaccess

# Add to .htaccess or Apache config
<RequireAll>
    Require all granted
    Require not ip 202.189.4.115
</RequireAll>

Analyzed high-risk IP addresses