Significant Threat
IP 43.247.91.112 identified as significant threat (8/10) from 16 events.
Multiple malicious indicators detected. Confidence level: 93%.
More threatening than 90% of monitored IPs
IP Address
43.247.91.112
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
Jiangsu Wuxi Internationa...
ASN 138950
16
Reports
Honeypot
Data Source
Threat Categories
SSH
14
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
High-Risk Network Association
This IP belongs to a network (ASN 138950) with elevated threat levels. The ISP Jiangsu Wuxi International IDC network hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
58%
High Confidence
Confidence History
23. Feb 2026 - 27. Feb 2026
93%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 43.247.91.112
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS138950
- ISP
- Jiangsu Wuxi International IDC network
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 16
- First Reported
- 23 Feb 2026
- Last Reported
- 27 Feb 2026, 19:05
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS138950
Jiangsu Wuxi International IDC network
CN
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
4
Total IPs Monitored
80
Total Reports
20
Reports per IP
Network Context
This IP address belongs to Jiangsu Wuxi International IDC network (AS138950), which manages 4 IP addresses in our monitoring system. Out of these, 80 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 570,535 reported IPs worldwide
Threat Level
8/10
avg: 5.8
+
Total Reports
16
avg: 11
+
Network Comparison
Compared against 5 IPs in ASN 138950
Threat Level
8/10
network avg: 9.2
=
Total Reports
16
network avg: 75
--
Network Jiangsu Wuxi International IDC network has overall threat level 7/10
Geographic Comparison
Compared against 39,156 IPs in CN
Threat Level
8/10
country avg: 5.3
++
Total Reports
16
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
14
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
508,125 threat incidents tracked globally • Last 24h: 136,225 Logs
FEED
Top Threat Sources
-
01
United States108,056 21.3% -
02
Brazil88,702 17.5%
-
03
India58,070 11.4%
-
04
China39,156 7.7%
-
05
Colombia12,284 2.4%
-
06
Germany12,187 2.4%
-
07
Argentina11,995 2.4%
-
08
Pakistan10,167 2%
-
09
Russia9,622 1.9%
-
10
Indonesia9,545 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
9.5/10
Avg Threat
80%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.11.230.160
10/10
Confidence
100%
Reports
172
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
97
ISP
China Unicom IP...
114.247.140.114
10/10
Confidence
100%
Reports
75
ISP
China Unicom Be...
111.22.78.253
10/10
Confidence
100%
Reports
73
ISP
China Mobile co...
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
14.103.127.3
10/10
Confidence
100%
Reports
51
ISP
China Telecom G...
180.164.45.181
10/10
Confidence
100%
Reports
46
ISP
China Telecom G...
36.111.32.237
8/10
Confidence
100%
Reports
41
ISP
China Telecom
117.62.238.207
8/10
Confidence
100%
Reports
35
ISP
CHINANET Nanjin...
112.4.79.138
10/10
Confidence
100%
Reports
31
ISP
China Mobile co...
116.228.233.93
10/10
Confidence
100%
Reports
29
ISP
China Telecom G...
120.48.175.122
10/10
Confidence
100%
Reports
29
ISP
Beijing Baidu N...
14.103.127.242
10/10
Confidence
100%
Reports
29
ISP
China Telecom G...
120.229.125.113
10/10
Confidence
100%
Reports
29
ISP
China Mobile Co...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
200.124.160.2
10/10
Confidence
93%
Reports
2,116
Location
MX
MX
193.46.255.86
10/10
Confidence
93%
Reports
1,773
Location
RO
RO
93.152.208.38
8/10
Confidence
93%
Reports
1,768
Location
BG
BG
5.83.143.40
10/10
Confidence
93%
Reports
1,658
Location
NL
NL
77.91.118.50
8/10
Confidence
93%
Reports
1,540
Location
RU
RU
130.12.181.98
8/10
Confidence
93%
Reports
1,224
Location
DE
DE
106.75.190.150
10/10
Confidence
93%
Reports
958
Location
CN
CN
107.172.158.148
8/10
Confidence
93%
Reports
928
Location
US
US
103.134.70.35
10/10
Confidence
93%
Reports
906
Location
BD
BD
108.165.230.122
10/10
Confidence
93%
Reports
887
Location
BR
BR
91.92.240.13
8/10
Confidence
93%
Reports
841
Location
DE
DE
160.119.76.4
8/10
Confidence
93%
Reports
820
Location
SC
SC
172.93.194.34
10/10
Confidence
93%
Reports
794
Location
US
US
195.178.110.237
10/10
Confidence
93%
Reports
791
Location
BG
BG
167.94.146.54
8/10
Confidence
93%
Reports
769
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 185.246.128.133
- 66.132.172.175
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.162
- 66.132.172.167
- 66.132.172.174
- 66.132.172.172
- 66.132.172.161
- 66.132.172.168
- 66.132.172.173
- 66.132.172.171
- 66.132.172.170
- 66.132.172.166
- 66.132.172.169
- 66.132.172.163
- 193.32.162.28
- 80.94.92.183
- 176.65.148.84
- 207.90.244.11
- 85.215.239.226
- 46.151.178.13