Substantial Risk
Threat level 8/10 for 103.203.57.28 based on 104 documented incidents.
Consistent suspicious behavior patterns. 84% confidence rating.
More threatening than 83% of monitored IPs
IP Address
103.203.57.28
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
Beijing Tiantexin Tech. C...
ASN 136180
104
Reports
Honeypot
Data Source
Threat Categories
Port Scan
30
Exploited Host
29
Technical Details
Port scanning identifies open services and potential attack vectors on target systems as reconnaissance for attacks.
Recommended Mitigations
Minimize exposed services, implement firewall rules, and monitor for scanning patterns.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
27. June 2026
Last Activity
25. July 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 136180) with generally good reputation. The ISP Beijing Tiantexin Tech. Co., Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
83%
Verified
Confidence History
6. Jun 2026 - 25. Jul 2026
84%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Exploited Host Port Scan | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Exploited Host Port Scan | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan Exploited Host | Honeypot x2 | 75% | |
| Port Scan | Honeypot | 75% | |
| Exploited Host Port Scan | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 103.203.57.28
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS136180
- ISP
- Beijing Tiantexin Tech. Co., Ltd.
DNS Information
- Reverse DNS
- scan-57-28.security.ipip.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 104
- First Reported
- 22 Jan 2026
- Last Reported
- 25 Jul 2026, 04:21
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS136180
Beijing Tiantexin Tech. Co., Ltd.
CN
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
19
Total IPs Monitored
745
Total Reports
39.2
Reports per IP
Network Context
This IP address belongs to Beijing Tiantexin Tech. Co., Ltd. (AS136180), which manages 19 IP addresses in our monitoring system. Out of these, 745 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 292,384 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
104
avg: 18
++
Network Comparison
Compared against 19 IPs in ASN 136180
Threat Level
8/10
network avg: 9.1
=
Total Reports
104
network avg: 51
++
Network Beijing Tiantexin Tech. Co., Ltd. has overall threat level 1/10
Geographic Comparison
Compared against 34,104 IPs in CN
Threat Level
8/10
country avg: 4.8
++
Total Reports
104
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 Jun 2026
2 reports
Daily Average
0.6
reports/day
Most Active
Thursday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
103
Port Scan
87
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
274,341 threat incidents tracked globally • Last 24h: 15,734 Logs
FEED
Top Threat Sources
-
01
United States61,753 22.5% -
02
India45,399 16.5% -
03
China34,104 12.4%
-
04
Brazil14,683 5.4% -
05
Germany9,846 3.6% -
06
Singapore7,951 2.9% -
07
Indonesia7,851 2.9% -
08
Pakistan7,790 2.8% -
09
Russia6,180 2.3% -
10
Netherlands5,904 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
9.1/10
Avg Threat
66%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
103.203.58.4
10/10
Confidence
86%
Reports
35
Location
CN
CN
103.203.57.2
10/10
Confidence
85%
Reports
78
Location
CN
CN
103.203.57.26
10/10
Confidence
84%
Reports
35
Location
CN
CN
103.203.57.20
10/10
Confidence
83%
Reports
42
Location
CN
CN
103.203.57.3
8/10
Confidence
81%
Reports
50
Location
CN
CN
103.203.58.3
10/10
Confidence
79%
Reports
15
Location
CN
CN
103.203.57.11
10/10
Confidence
78%
Reports
60
Location
CN
CN
103.203.57.18
10/10
Confidence
78%
Reports
32
Location
CN
CN
103.203.56.1
8/10
Confidence
74%
Reports
13
Location
CN
CN
103.203.59.1
8/10
Confidence
71%
Reports
66
Location
CN
CN
103.203.59.17
10/10
Confidence
60%
Reports
30
Location
CN
CN
103.203.56.2
8/10
Confidence
60%
Reports
7
Location
CN
CN
103.203.59.7
10/10
Confidence
59%
Reports
296
Location
CN
CN
103.203.59.5
10/10
Confidence
59%
Reports
71
Location
CN
CN
103.203.57.19
10/10
Confidence
58%
Reports
16
Location
CN
CN
103.203.56.3
8/10
Confidence
49%
Reports
4
Location
CN
CN
103.203.59.12
10/10
Confidence
40%
Reports
8
Location
CN
CN
103.203.59.3
4/10
Confidence
3%
Reports
1
Location
CN
CN
IPs from the same subnet range, likely same network segment.
7
Related IPs
9.7/10
Avg Threat
78%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
103.203.57.2
10/10
Confidence
85%
Reports
78
Location
CN
CN
103.203.57.26
10/10
Confidence
84%
Reports
35
Location
CN
CN
103.203.57.20
10/10
Confidence
83%
Reports
42
Location
CN
CN
103.203.57.3
8/10
Confidence
81%
Reports
50
Location
CN
CN
103.203.57.11
10/10
Confidence
78%
Reports
60
Location
CN
CN
103.203.57.18
10/10
Confidence
78%
Reports
32
Location
CN
CN
103.203.57.19
10/10
Confidence
58%
Reports
16
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.11.230.160
10/10
Confidence
100%
Reports
172
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
97
ISP
China Unicom IP...
114.247.140.114
10/10
Confidence
100%
Reports
75
ISP
China Unicom Be...
111.22.78.253
10/10
Confidence
100%
Reports
73
ISP
China Mobile co...
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
203.2.115.107
8/10
Confidence
100%
Reports
60
ISP
Chongqing Telecom
14.103.127.3
10/10
Confidence
100%
Reports
51
ISP
China Telecom G...
180.164.45.181
10/10
Confidence
100%
Reports
46
ISP
China Telecom G...
113.249.101.167
8/10
Confidence
100%
Reports
46
ISP
Chongqing Telecom
36.111.32.237
8/10
Confidence
100%
Reports
41
ISP
China Telecom
117.62.238.207
8/10
Confidence
100%
Reports
35
ISP
CHINANET Nanjin...
112.4.79.138
10/10
Confidence
100%
Reports
31
ISP
China Mobile co...
120.229.125.113
10/10
Confidence
100%
Reports
29
ISP
China Mobile Co...
218.207.25.249
10/10
Confidence
100%
Reports
28
ISP
China Mobile Co...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
137.184.32.56
8/10
Confidence
84%
Reports
9,468
Location
US
US
146.190.153.30
8/10
Confidence
84%
Reports
9,349
Location
US
US
24.199.126.56
8/10
Confidence
84%
Reports
9,302
Location
US
US
209.38.70.156
8/10
Confidence
84%
Reports
9,283
Location
US
US
172.110.223.33
8/10
Confidence
84%
Reports
6,995
Location
HK
HK
178.128.32.203
8/10
Confidence
84%
Reports
6,449
Location
GB
GB
176.65.149.220
10/10
Confidence
84%
Reports
5,624
Location
NL
NL
176.65.149.55
10/10
Confidence
84%
Reports
5,289
Location
NL
NL
79.124.59.78
10/10
Confidence
84%
Reports
4,575
Location
BG
BG
2.57.121.25
10/10
Confidence
84%
Reports
3,421
Location
RO
RO
152.32.170.55
10/10
Confidence
84%
Reports
2,854
Location
HK
HK
62.171.176.188
10/10
Confidence
84%
Reports
1,346
Location
FR
FR
65.49.20.66
8/10
Confidence
84%
Reports
858
Location
US
US
167.94.146.51
10/10
Confidence
84%
Reports
798
Location
US
US
64.62.156.202
8/10
Confidence
84%
Reports
746
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.172
- 66.132.172.167
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13