Extreme Threat
IP 43.248.27.115 classified at threat level 10/10 with 58 documented attacks.
Advanced threat indicators confirmed with 18% certainty.
More threatening than 94% of monitored IPs
IP Address
43.248.27.115
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
ID
Location
Neuviz Net
ASN 18103
58
Reports
Honeypot
Data Source
Threat Categories
SSH
23
Hacking
7
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Moderate Network Risk
The network hosting this IP (ASN 18103, operated by Neuviz Net) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
15%
Low Confidence
Confidence History
15. May 2026 - 21. Jul 2026
18%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 43.248.27.115
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ID
- ASN
- AS18103
- ISP
- Neuviz Net
DNS Information
- Reverse DNS
- ip-115-27-248-43.neuviz.net.id
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 58
- First Reported
- 1 Feb 2026
- Last Reported
- 21 Jul 2026, 20:58
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS18103
Neuviz Net
ID
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
5
Total IPs Monitored
49
Total Reports
9.8
Reports per IP
Network Context
This IP address belongs to Neuviz Net (AS18103), which manages 5 IP addresses in our monitoring system. Out of these, 49 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,561 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
58
avg: 9
++
Network Comparison
Compared against 16 IPs in ASN 18103
Threat Level
10/10
network avg: 7.9
+
Total Reports
58
network avg: 12
++
Network Neuviz Net has overall threat level 4/10
Geographic Comparison
Compared against 14,944 IPs in ID
Threat Level
10/10
country avg: 6.9
+
Total Reports
58
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
49
Hacking
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 04:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
756,872 threat incidents tracked globally • Last 24h: 29,621 Logs
FEED
Top Threat Sources
-
01
United States148,132 19.6% -
02
Brazil111,841 14.8%
-
03
India87,172 11.5%
-
04
China46,061 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,367 2.4%
-
07
Netherlands17,978 2.4%
-
08
Pakistan17,804 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
15
Related IPs
7.8/10
Avg Threat
25%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
203.128.83.106
10/10
Confidence
90%
Reports
18
Location
ID
ID
103.26.209.157
10/10
Confidence
58%
Reports
7
Location
ID
ID
103.26.209.179
10/10
Confidence
52%
Reports
7
Location
ID
ID
103.26.209.178
10/10
Confidence
33%
Reports
39
Location
ID
ID
203.128.71.117
7/10
Confidence
24%
Reports
2
Location
ID
ID
203.128.88.26
7/10
Confidence
24%
Reports
2
Location
ID
ID
203.128.65.124
4/10
Confidence
23%
Reports
1
Location
ID
ID
103.30.85.248
4/10
Confidence
23%
Reports
1
Location
ID
ID
203.128.67.59
7/10
Confidence
16%
Reports
1
Location
ID
ID
103.26.209.181
10/10
Confidence
13%
Reports
36
Location
ID
ID
203.128.94.32
5/10
Confidence
13%
Reports
1
Location
ID
ID
103.26.209.182
8/10
Confidence
2%
Reports
6
Location
ID
ID
203.128.67.61
10/10
Confidence
2%
Reports
5
Location
ID
ID
203.128.81.52
7/10
Confidence
2%
Reports
1
Location
ID
ID
103.26.209.180
8/10
Confidence
1%
Reports
7
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
210.87.97.90
10/10
Confidence
100%
Reports
183
ISP
PT Solusi Data ...
103.154.81.166
10/10
Confidence
100%
Reports
132
ISP
PT Mora Telemat...
160.22.240.235
10/10
Confidence
100%
Reports
126
ISP
PT Seeplus Medi...
103.121.20.18
10/10
Confidence
100%
Reports
114
ISP
PT. Eka Mas Rep...
103.90.25.52
10/10
Confidence
100%
Reports
112
ISP
PT. Arana Tekno...
103.162.1.80
10/10
Confidence
100%
Reports
97
ISP
PT Satu Sistem ...
103.214.100.4
10/10
Confidence
100%
Reports
92
ISP
PT SURYA TEKNIK...
117.102.87.140
10/10
Confidence
100%
Reports
89
ISP
BIZNET NETWORKS
103.154.137.43
10/10
Confidence
100%
Reports
78
ISP
PT Mora Telemat...
36.64.131.68
10/10
Confidence
100%
Reports
78
ISP
PT Telekomunika...
103.79.90.26
10/10
Confidence
100%
Reports
76
ISP
PEMERINTAH KABU...
202.150.130.180
10/10
Confidence
100%
Reports
68
ISP
PT Comtronics S...
103.154.137.41
10/10
Confidence
100%
Reports
67
ISP
PT Mora Telemat...
103.162.69.11
10/10
Confidence
100%
Reports
65
ISP
Dinas Komunikas...
119.47.88.254
8/10
Confidence
100%
Reports
57
ISP
JAWA POS NATION...
IPs with similar threat level and confidence scores.
15
Related IPs
2.9/10
Avg Threat
18%
Avg Confidence
151.247.52.58
4/10
Confidence
18%
Reports
1
Location
US
US
74.0.101.165
4/10
Confidence
18%
Reports
1
Location
US
US
181.177.106.138
4/10
Confidence
18%
Reports
1
Location
US
US
16.216.88.122
4/10
Confidence
18%
Reports
1
Location
US
US
2.241.211.169
4/10
Confidence
18%
Reports
1
Location
DE
DE
16.216.88.195
4/10
Confidence
18%
Reports
1
Location
US
US
195.2.80.36
2/10
Confidence
18%
Reports
2
Location
RU
RU
150.251.225.154
2/10
Confidence
18%
Reports
2
Location
AT
AT
82.139.195.235
2/10
Confidence
18%
Reports
2
Location
DZ
DZ
185.169.235.67
2/10
Confidence
18%
Reports
2
Location
UZ
UZ
185.174.108.27
2/10
Confidence
18%
Reports
2
Location
JE
JE
158.173.191.116
2/10
Confidence
18%
Reports
2
Location
IT
IT
74.0.103.70
4/10
Confidence
18%
Reports
1
Location
US
US
98.159.234.196
2/10
Confidence
18%
Reports
2
Location
GB
GB
200.162.154.8
2/10
Confidence
18%
Reports
2
Location
ME
ME