Elevated Risk
Elevated threat level 8/10 for IP 36.138.252.97 from 26 reported incidents.
Behavioral profile indicates cyber threat activity with 96% confidence.
More threatening than 90% of monitored IPs
IP Address
36.138.252.97
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
China
Location
China Mobile Communicatio...
ASN 9808
26
Reports
Honeypot
Data Source
Threat Categories
Hacking
26
SSH
9
Exploited Host
2
Brute-Force
2
WP Plugin Exploit
1
WP User Enumeration
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
1. October 2026
Last Activity
2. October 2026
Recent (7 days)
20 incidents
Moderate Network Risk
The network hosting this IP (ASN 9808, operated by China Mobile Communications Group Co., Ltd.) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
96%
Verified
Confidence History
13. May 2026 - 2. Oct 2026
96%
Current
Stable
Trend
Security Reports (26)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking Exploited Host | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking | Honeypot | 75% |
| Hacking | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Brute-Force WP Plugin Exploit +1 | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 36.138.252.97
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS9808
- ISP
- China Mobile Communications Group Co., Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 26
- First Reported
- 13 May 2026
- Last Reported
- 2 Oct 2026, 07:35
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9808
China Mobile Communications Group Co., Ltd.
CN
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
666
Total IPs Monitored
9,090
Total Reports
13.6
Reports per IP
Network Context
This IP address belongs to China Mobile Communications Group Co., Ltd. (AS9808), which manages 666 IP addresses in our monitoring system. Out of these, 9,090 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 812,067 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
26
avg: 9
++
Network Comparison
Compared against 1,170 IPs in ASN 9808
Threat Level
8/10
network avg: 7.6
=
Total Reports
26
network avg: 10
++
Network China Mobile Communications Group Co., Ltd. has overall threat level 4/10
Geographic Comparison
Compared against 45,064 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
26
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Oct 2026
17 reports
Daily Average
0.7
reports/day
Most Active
Friday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
26
SSH
9
Brute-Force
2
Exploited Host
2
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
738,281 threat incidents tracked globally • Last 24h: 41,568 Logs
FEED
Top Threat Sources
-
01
United States144,373 19.6% -
02
Brazil111,025 15%
-
03
India82,955 11.2%
-
04
China45,064 6.1%
-
05
SC29,242 4%
-
06
Germany17,689 2.4%
-
07
Netherlands17,565 2.4%
-
08
Pakistan16,849 2.3%
-
09
Argentina16,210 2.2%
-
10
Colombia15,148 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.6/10
Avg Threat
86%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
36.137.249.148
10/10
Confidence
97%
Reports
11
Location
CN
CN
120.234.172.28
10/10
Confidence
96%
Reports
24
Location
CN
CN
36.213.69.67
10/10
Confidence
94%
Reports
44
Location
CN
CN
36.164.0.94
10/10
Confidence
94%
Reports
44
Location
CN
CN
36.137.169.74
10/10
Confidence
94%
Reports
34
Location
CN
CN
112.27.76.17
10/10
Confidence
94%
Reports
27
Location
CN
CN
36.136.58.10
10/10
Confidence
94%
Reports
14
Location
CN
CN
36.139.161.140
10/10
Confidence
89%
Reports
19
Location
CN
CN
36.134.208.91
10/10
Confidence
88%
Reports
13
Location
CN
CN
36.189.82.46
10/10
Confidence
87%
Reports
26
Location
CN
CN
111.32.153.180
8/10
Confidence
86%
Reports
35
Location
CN
CN
111.48.160.201
10/10
Confidence
85%
Reports
11
Location
CN
CN
111.47.243.219
8/10
Confidence
83%
Reports
53
Location
CN
CN
183.224.237.233
8/10
Confidence
83%
Reports
19
Location
CN
CN
36.134.27.91
10/10
Confidence
81%
Reports
18
Location
CN
CN
117.174.64.61
10/10
Confidence
79%
Reports
22
Location
CN
CN
39.130.240.253
10/10
Confidence
78%
Reports
10
Location
CN
CN
111.9.22.102
10/10
Confidence
73%
Reports
98
Location
CN
CN
183.232.212.207
8/10
Confidence
73%
Reports
32
Location
CN
CN
183.236.175.134
10/10
Confidence
72%
Reports
16
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
42.51.42.209
10/10
Confidence
100%
Reports
24
ISP
Zhengzhou Fasti...
202.101.144.44
10/10
Confidence
100%
Reports
19
ISP
Chinanet
118.121.202.149
10/10
Confidence
100%
Reports
17
ISP
CHINANET SiChua...
122.114.69.235
8/10
Confidence
100%
Reports
16
ISP
CHINA UNICOM Ch...
118.196.142.135
10/10
Confidence
100%
Reports
16
ISP
China Telecom G...
125.94.109.237
10/10
Confidence
100%
Reports
15
ISP
Chinanet
115.191.27.238
10/10
Confidence
100%
Reports
15
ISP
Beijing Volcano...
27.155.120.131
10/10
Confidence
100%
Reports
14
ISP
Fuzhou
182.44.26.211
10/10
Confidence
100%
Reports
13
ISP
Cloud Computing...
118.145.246.44
10/10
Confidence
100%
Reports
13
ISP
Beijing Volcano...
106.120.205.138
10/10
Confidence
100%
Reports
12
ISP
China Networks ...
183.129.148.70
10/10
Confidence
98%
Reports
42
ISP
Chinanet
203.56.198.45
10/10
Confidence
98%
Reports
26
ISP
Sichuan Chuanxn...
115.190.151.242
10/10
Confidence
98%
Reports
19
ISP
Beijing Volcano...
112.123.228.180
10/10
Confidence
98%
Reports
15
ISP
CHINA UNICOM Ch...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.5.0.236
8/10
Confidence
96%
Reports
636
Location
US
US
216.219.89.86
10/10
Confidence
96%
Reports
560
Location
US
US
204.76.203.4
8/10
Confidence
96%
Reports
396
Location
NL
NL
80.94.93.9
8/10
Confidence
96%
Reports
318
Location
RO
RO
109.205.211.29
8/10
Confidence
96%
Reports
317
Location
AZ
AZ
109.205.211.27
8/10
Confidence
96%
Reports
238
Location
AZ
AZ
86.38.182.193
10/10
Confidence
96%
Reports
169
Location
FI
FI
185.73.23.162
8/10
Confidence
96%
Reports
160
Location
DE
DE
91.196.152.161
10/10
Confidence
96%
Reports
154
Location
FR
FR
91.231.89.18
8/10
Confidence
96%
Reports
145
Location
FR
FR
61.51.111.26
10/10
Confidence
96%
Reports
130
Location
CN
CN
91.231.89.101
10/10
Confidence
96%
Reports
127
Location
FR
FR
91.231.89.37
10/10
Confidence
96%
Reports
125
Location
FR
FR
91.231.89.125
10/10
Confidence
96%
Reports
123
Location
FR
FR
91.231.89.120
10/10
Confidence
96%
Reports
123
Location
FR
FR