Moderate Risk
IP 203.227.62.116 presents moderate risk (6/10) with 19 security reports.
Some concerning behavior detected. Confidence: 52%.
More threatening than 59% of monitored IPs
IP Address
203.227.62.116
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
South Korea
Location
SEJONG NETWORKS
ASN 9848
19
Reports
Community
Data Source
Threat Categories
Port Scan
19
Technical Details
Port scanning identifies open services and potential attack vectors on target systems as reconnaissance for attacks.
Recommended Mitigations
Minimize exposed services, implement firewall rules, and monitor for scanning patterns.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
3. October 2026
Last Activity
3. October 2026
Recent (7 days)
19 incidents
Moderate Network Risk
The network hosting this IP (ASN 9848, operated by SEJONG NETWORKS) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Standard monitoring recommended. Apply conditional access controls as needed.
Long-term blocking recommended.
Reputation Summary
Threat Level
6/10
Medium
High
Activity Frequency
8/10
High
Confidence Score
51%
High Confidence
Confidence History
3. Oct 2026
52%
Current
Stable
Trend
Security Reports (19)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan | Community | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x4 | 75% | |
| Port Scan | Community | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x2 | 75% | |
| Port Scan | Community x3 | 75% | |
| Port Scan | Community | 75% | |
| Port Scan | Community | 75% | |
| Port Scan | Community x3 | 75% |
Technical Details
Basic Information
- IP Address
- 203.227.62.116
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
KR
- ASN
- AS9848
- ISP
- SEJONG NETWORKS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 19
- First Reported
- 3 Oct 2026
- Last Reported
- 3 Oct 2026, 05:36
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9848
SEJONG NETWORKS
KR
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
3
Total IPs Monitored
6
Total Reports
2
Reports per IP
Network Context
This IP address belongs to SEJONG NETWORKS (AS9848), which manages 3 IP addresses in our monitoring system. Out of these, 6 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
59
%
Global Threat Ranking
This IP is more threatening than 59% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 834,037 reported IPs worldwide
Threat Level
6/10
avg: 6.3
=
Total Reports
19
avg: 9
++
Network Comparison
Compared against 6 IPs in ASN 9848
Threat Level
6/10
network avg: 6.5
=
Total Reports
19
network avg: 5
++
Network SEJONG NETWORKS has overall threat level 5/10
Geographic Comparison
Compared against 4,831 IPs in KR
Threat Level
6/10
country avg: 7.3
-
Total Reports
19
country avg: 12
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Oct 2026
19 reports
Daily Average
0.6
reports/day
Most Active
Saturday
19 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Port Scan
19
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
758,253 threat incidents tracked globally • Last 24h: 31,380 Logs
FEED
Top Threat Sources
-
01
United States148,440 19.6% -
02
Brazil111,910 14.8%
-
03
India87,360 11.5%
-
04
China46,134 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,467 2.4%
-
07
Netherlands18,041 2.4%
-
08
Pakistan17,848 2.4%
-
09
Argentina16,274 2.1%
-
10
Colombia15,173 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
6.6/10
Avg Threat
10%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
14.206.0.20
10/10
Confidence
100%
Reports
44
ISP
Piranha Systems
61.43.121.132
10/10
Confidence
100%
Reports
24
ISP
LG DACOM Corpor...
185.227.152.135
10/10
Confidence
100%
Reports
22
ISP
Cloudie Limited
175.203.57.19
10/10
Confidence
100%
Reports
19
ISP
Korea Telecom
20.214.105.208
8/10
Confidence
100%
Reports
15
ISP
Microsoft Corpo...
118.194.249.186
8/10
Confidence
99%
Reports
46
ISP
UCLOUD INFORMAT...
14.46.87.209
8/10
Confidence
99%
Reports
21
ISP
Korea Telecom
20.196.195.74
8/10
Confidence
99%
Reports
19
ISP
Microsoft Corpo...
121.148.71.200
10/10
Confidence
98%
Reports
37
ISP
Korea Telecom
1.209.110.147
10/10
Confidence
98%
Reports
32
ISP
LG DACOM Corpor...
211.220.197.170
10/10
Confidence
98%
Reports
24
ISP
Korea Telecom
49.247.138.161
10/10
Confidence
98%
Reports
19
ISP
SMILESERV
199.241.120.131
8/10
Confidence
98%
Reports
14
ISP
Navox co.,Ltd
115.68.17.246
10/10
Confidence
96%
Reports
164
ISP
SMILESERV
220.117.241.220
10/10
Confidence
96%
Reports
65
ISP
Korea Telecom
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
52%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.11.62.72
10/10
Confidence
52%
Reports
4
Location
PK
PK
2401:4900:1c5e:7214:bcca:c018:50c3:c8ac
10/10
Confidence
52%
Reports
4
Location
IN
IN
31.215.60.25
10/10
Confidence
52%
Reports
3
Location
AE
AE
117.247.108.50
10/10
Confidence
52%
Reports
3
Location
IN
IN
150.107.213.136
10/10
Confidence
52%
Reports
3
Location
IN
IN
39.38.251.117
10/10
Confidence
52%
Reports
4
Location
PK
PK
2a00:23a8:42a7:d01:97a:fb7e:e51:aebd
10/10
Confidence
52%
Reports
4
Location
GB
GB
86.127.163.36
10/10
Confidence
52%
Reports
4
Location
RO
RO
203.124.55.52
10/10
Confidence
52%
Reports
3
Location
PK
PK
202.148.3.3
10/10
Confidence
52%
Reports
4
Location
ID
ID
103.113.178.232
10/10
Confidence
52%
Reports
4
Location
TH
TH
38.51.187.210
10/10
Confidence
52%
Reports
4
Location
CO
CO
165.227.42.232
10/10
Confidence
52%
Reports
5
Location
CA
CA
178.128.123.119
10/10
Confidence
52%
Reports
6
Location
SG
SG
168.181.49.238
10/10
Confidence
52%
Reports
4
Location
BR
BR