Critical Alert
Security alert: 203.248.19.4 rated 10/10 based on 42 verified incidents.
Threat profile indicates sustained malicious activity with 96% confidence rating.
More threatening than 100% of monitored IPs
IP Address
203.248.19.4
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
South Korea
Location
Hostway IDC
ASN 9952
42
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
SSH
29
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
25. October 2026
Last Activity
9. November 2026
Recent (7 days)
40 incidents
Reputable Network
This IP is hosted on a network (ASN 9952) with generally good reputation. The ISP Hostway IDC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
96%
Verified
Confidence History
9. Nov 2026
96%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking Exploited Host | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 203.248.19.4
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
KR
- ASN
- AS9952
- ISP
- Hostway IDC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 42
- First Reported
- 27 Oct 2026
- Last Reported
- 9 Nov 2026, 16:22
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,337,744 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
42
avg: 7
++
Network Comparison
Compared against 2 IPs in ASN 9952
Threat Level
10/10
network avg: 10.0
=
Total Reports
42
network avg: 36
+
Geographic Comparison
Compared against 5,700 IPs in KR
Threat Level
10/10
country avg: 7.2
+
Total Reports
42
country avg: 11
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Nov 2026
40 reports
Daily Average
1.4
reports/day
Most Active
Monday
40 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
40
SSH
38
Brute-Force
2
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
1,219,592 threat incidents tracked globally • Last 24h: 25,425 Logs
FEED
Top Threat Sources
-
01
Brazil261,346 21.4% -
02
United States209,807 17.2% -
03
India103,695 8.5% -
04
China51,495 4.2% -
05
Argentina42,456 3.5% -
06
SC29,465 2.4% -
07
Mexico27,970 2.3% -
08
Russia27,152 2.2% -
09
Germany25,001 2% -
10
Colombia24,297 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
10/10
Avg Threat
85%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.161.75.207
10/10
Confidence
98%
Reports
20
ISP
Korea Telecom
175.203.201.109
10/10
Confidence
97%
Reports
15
ISP
Korea Telecom
14.53.202.223
10/10
Confidence
96%
Reports
57
ISP
Korea Telecom
175.209.156.146
10/10
Confidence
96%
Reports
51
ISP
Korea Telecom
121.133.167.123
10/10
Confidence
96%
Reports
45
ISP
Korea Telecom
106.244.120.37
10/10
Confidence
96%
Reports
45
ISP
LG DACOM Corpor...
119.192.128.163
10/10
Confidence
96%
Reports
43
ISP
Korea Telecom
218.234.186.2
10/10
Confidence
96%
Reports
37
ISP
SK Broadband Co...
121.134.185.211
10/10
Confidence
96%
Reports
37
ISP
Korea Telecom
115.160.76.23
10/10
Confidence
96%
Reports
36
ISP
Seokyung Cable ...
210.206.95.162
10/10
Confidence
96%
Reports
34
ISP
LG DACOM Corpor...
220.76.220.247
10/10
Confidence
96%
Reports
31
ISP
Korea Telecom
220.116.117.213
10/10
Confidence
96%
Reports
29
ISP
Korea Telecom
115.90.65.132
10/10
Confidence
96%
Reports
29
ISP
LG DACOM Corpor...
218.155.74.4
10/10
Confidence
96%
Reports
28
ISP
Korea Telecom
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
66.132.195.187
8/10
Confidence
96%
Reports
12
Location
US
US
141.193.153.146
10/10
Confidence
96%
Reports
37
Location
HK
HK
175.209.156.146
10/10
Confidence
96%
Reports
51
Location
KR
KR
77.239.124.112
8/10
Confidence
96%
Reports
69
Location
US
US
109.238.86.52
8/10
Confidence
96%
Reports
28
Location
GB
GB
206.189.33.108
8/10
Confidence
96%
Reports
14
Location
SG
SG
35.195.66.107
8/10
Confidence
96%
Reports
61
Location
BE
BE
66.132.159.101
8/10
Confidence
96%
Reports
15
Location
US
US
183.224.97.83
10/10
Confidence
96%
Reports
33
Location
CN
CN
202.100.41.30
10/10
Confidence
96%
Reports
34
Location
CN
CN
77.239.124.121
8/10
Confidence
96%
Reports
28
Location
US
US
121.46.244.22
10/10
Confidence
96%
Reports
21
Location
CN
CN
34.62.204.238
8/10
Confidence
96%
Reports
42
Location
BE
BE
103.153.130.56
8/10
Confidence
96%
Reports
14
Location
BD
BD
47.79.40.102
8/10
Confidence
96%
Reports
172
Location
JP
JP