Notable Threat
IP 103.203.57.3 rated 8/10 from 50 verified reports.
Multiple security incidents attributed to this IP. Confidence: 81%.
More threatening than 83% of monitored IPs
IP Address
103.203.57.3
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
Beijing Tiantexin Tech. C...
ASN 136180
50
Reports
Honeypot
Data Source
Threat Categories
Port Scan
30
Web App Attack
30
Technical Details
Port scanning identifies open services and potential attack vectors on target systems as reconnaissance for attacks.
Recommended Mitigations
Minimize exposed services, implement firewall rules, and monitor for scanning patterns.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
27. June 2026
Last Activity
21. July 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 136180) with generally good reputation. The ISP Beijing Tiantexin Tech. Co., Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
76%
Verified
Confidence History
13. Mar 2026 - 21. Jul 2026
81%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% | |
| Port Scan Web App Attack | Honeypot x2 | 75% | |
| Web App Attack Port Scan | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 103.203.57.3
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS136180
- ISP
- Beijing Tiantexin Tech. Co., Ltd.
DNS Information
- Reverse DNS
- scan-57-3.security.ipip.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 50
- First Reported
- 17 Aug 2025
- Last Reported
- 21 Jul 2026, 17:32
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS136180
Beijing Tiantexin Tech. Co., Ltd.
CN
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
19
Total IPs Monitored
745
Total Reports
39.2
Reports per IP
Network Context
This IP address belongs to Beijing Tiantexin Tech. Co., Ltd. (AS136180), which manages 19 IP addresses in our monitoring system. Out of these, 745 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 292,323 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
50
avg: 18
++
Network Comparison
Compared against 19 IPs in ASN 136180
Threat Level
8/10
network avg: 9.1
=
Total Reports
50
network avg: 51
=
Network Beijing Tiantexin Tech. Co., Ltd. has overall threat level 1/10
Geographic Comparison
Compared against 34,096 IPs in CN
Threat Level
8/10
country avg: 4.8
++
Total Reports
50
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 Jun 2026
1 reports
Daily Average
0.2
reports/day
Most Active
Sunday
14 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
50
Port Scan
32
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
274,293 threat incidents tracked globally • Last 24h: 15,743 Logs
FEED
Top Threat Sources
-
01
United States61,735 22.5% -
02
India45,396 16.6% -
03
China34,096 12.4%
-
04
Brazil14,680 5.4% -
05
Germany9,846 3.6% -
06
Singapore7,949 2.9% -
07
Indonesia7,851 2.9% -
08
Pakistan7,790 2.8% -
09
Russia6,180 2.3% -
10
Netherlands5,904 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
9.1/10
Avg Threat
66%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
103.203.57.2
10/10
Confidence
85%
Reports
78
Location
CN
CN
103.203.57.28
8/10
Confidence
84%
Reports
104
Location
CN
CN
103.203.57.26
10/10
Confidence
84%
Reports
35
Location
CN
CN
103.203.58.4
10/10
Confidence
84%
Reports
34
Location
CN
CN
103.203.57.20
10/10
Confidence
83%
Reports
42
Location
CN
CN
103.203.58.3
10/10
Confidence
79%
Reports
15
Location
CN
CN
103.203.57.11
10/10
Confidence
78%
Reports
60
Location
CN
CN
103.203.57.18
10/10
Confidence
78%
Reports
32
Location
CN
CN
103.203.56.1
8/10
Confidence
74%
Reports
13
Location
CN
CN
103.203.59.1
8/10
Confidence
71%
Reports
66
Location
CN
CN
103.203.59.17
10/10
Confidence
60%
Reports
30
Location
CN
CN
103.203.56.2
8/10
Confidence
60%
Reports
7
Location
CN
CN
103.203.59.7
10/10
Confidence
59%
Reports
296
Location
CN
CN
103.203.59.5
10/10
Confidence
59%
Reports
71
Location
CN
CN
103.203.57.19
10/10
Confidence
58%
Reports
16
Location
CN
CN
103.203.56.3
8/10
Confidence
49%
Reports
4
Location
CN
CN
103.203.59.12
10/10
Confidence
40%
Reports
8
Location
CN
CN
103.203.59.3
4/10
Confidence
3%
Reports
1
Location
CN
CN
IPs from the same subnet range, likely same network segment.
7
Related IPs
9.7/10
Avg Threat
79%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
103.203.57.2
10/10
Confidence
85%
Reports
78
Location
CN
CN
103.203.57.28
8/10
Confidence
84%
Reports
104
Location
CN
CN
103.203.57.26
10/10
Confidence
84%
Reports
35
Location
CN
CN
103.203.57.20
10/10
Confidence
83%
Reports
42
Location
CN
CN
103.203.57.11
10/10
Confidence
78%
Reports
60
Location
CN
CN
103.203.57.18
10/10
Confidence
78%
Reports
32
Location
CN
CN
103.203.57.19
10/10
Confidence
58%
Reports
16
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.11.230.160
10/10
Confidence
100%
Reports
172
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
97
ISP
China Unicom IP...
114.247.140.114
10/10
Confidence
100%
Reports
75
ISP
China Unicom Be...
111.22.78.253
10/10
Confidence
100%
Reports
73
ISP
China Mobile co...
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
203.2.115.107
8/10
Confidence
100%
Reports
60
ISP
Chongqing Telecom
180.164.45.181
10/10
Confidence
100%
Reports
46
ISP
China Telecom G...
113.249.101.167
8/10
Confidence
100%
Reports
46
ISP
Chongqing Telecom
36.111.32.237
8/10
Confidence
100%
Reports
41
ISP
China Telecom
117.62.238.207
8/10
Confidence
100%
Reports
35
ISP
CHINANET Nanjin...
112.4.79.138
10/10
Confidence
100%
Reports
31
ISP
China Mobile co...
120.229.125.113
10/10
Confidence
100%
Reports
29
ISP
China Mobile Co...
218.207.25.249
10/10
Confidence
100%
Reports
28
ISP
China Mobile Co...
117.148.110.13
10/10
Confidence
100%
Reports
27
ISP
China Mobile co...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
81%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2a01:04f8:c012:4640:0000:0000:0000:0001
10/10
Confidence
81%
Reports
24,446
Location
DE
DE
147.182.225.86
8/10
Confidence
81%
Reports
11,690
Location
US
US
80.94.92.71
10/10
Confidence
81%
Reports
1,724
Location
RO
RO
64.62.156.192
8/10
Confidence
81%
Reports
1,111
Location
US
US
45.82.78.105
10/10
Confidence
81%
Reports
1,068
Location
DE
DE
130.12.180.65
10/10
Confidence
81%
Reports
1,037
Location
NL
NL
64.62.156.162
8/10
Confidence
81%
Reports
756
Location
US
US
65.49.1.66
8/10
Confidence
81%
Reports
733
Location
US
US
184.105.247.195
10/10
Confidence
81%
Reports
724
Location
US
US
65.49.1.10
8/10
Confidence
81%
Reports
711
Location
US
US
184.105.247.254
8/10
Confidence
81%
Reports
710
Location
US
US
65.49.1.52
8/10
Confidence
81%
Reports
694
Location
US
US
195.178.110.218
10/10
Confidence
81%
Reports
693
Location
BG
BG
193.32.162.151
10/10
Confidence
81%
Reports
666
Location
RO
RO
107.173.112.54
10/10
Confidence
81%
Reports
622
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.172
- 66.132.172.167
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13