Significant Threat
IP 193.123.245.198 identified as significant threat (8/10) from 97 events.
Multiple malicious indicators detected. Confidence level: 99%.
More threatening than 82% of monitored IPs
IP Address
193.123.245.198
IPv4
Public
KR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
KR
Location
ORACLE-BMC-31898
ASN 31898
97
Reports
Honeypot
Data Source
Threat Categories
SSH
27
Hacking
6
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 31898) with generally good reputation. The ISP ORACLE-BMC-31898 maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
74%
High Confidence
Confidence History
17. Mar 2026 - 3. May 2026
99%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 193.123.245.198
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
KR
- ASN
- AS31898
- ISP
- ORACLE-BMC-31898
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 97
- First Reported
- 19 Feb 2026
- Last Reported
- 3 May 2026, 12:28
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS31898
Oracle Corporation
SG
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
445
Total IPs Monitored
8,338
Total Reports
18.7
Reports per IP
Network Context
This IP address belongs to Oracle Corporation (AS31898), which manages 445 IP addresses in our monitoring system. Out of these, 8,338 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,347 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
97
avg: 23
++
Network Comparison
Compared against 705 IPs in ASN 31898
Threat Level
8/10
network avg: 6.1
+
Total Reports
97
network avg: 16
++
Network ORACLE-BMC-31898 has overall threat level 2/10
Geographic Comparison
Compared against 2,287 IPs in KR
Threat Level
8/10
country avg: 5.3
+
Total Reports
97
country avg: 19
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
92
Hacking
10
Exploited Host
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8% -
06
Singapore6,475 3.5%
-
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.4/10
Avg Threat
100%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
74.91.224.220
8/10
Confidence
100%
Reports
490
Location
SG
SG
50.6.7.129
8/10
Confidence
100%
Reports
447
Location
US
US
50.6.229.148
8/10
Confidence
100%
Reports
346
Location
US
US
50.6.226.221
10/10
Confidence
100%
Reports
223
Location
US
US
158.179.210.22
10/10
Confidence
100%
Reports
87
Location
ES
ES
50.6.224.46
8/10
Confidence
100%
Reports
85
Location
US
US
129.121.76.191
8/10
Confidence
100%
Reports
82
Location
US
US
129.121.41.228
8/10
Confidence
100%
Reports
79
Location
BR
BR
66.116.235.214
8/10
Confidence
100%
Reports
63
Location
AE
AE
50.6.231.19
8/10
Confidence
100%
Reports
57
Location
US
US
141.147.175.186
10/10
Confidence
100%
Reports
56
Location
JP
JP
150.136.244.33
8/10
Confidence
100%
Reports
47
Location
US
US
129.121.77.87
8/10
Confidence
100%
Reports
44
Location
US
US
161.118.210.105
8/10
Confidence
100%
Reports
32
Location
SG
SG
150.136.129.10
10/10
Confidence
100%
Reports
32
Location
US
US
161.118.200.79
8/10
Confidence
100%
Reports
29
Location
SG
SG
134.185.83.159
8/10
Confidence
100%
Reports
26
Location
SG
SG
213.35.123.95
8/10
Confidence
100%
Reports
25
Location
SG
SG
66.116.199.98
8/10
Confidence
100%
Reports
23
Location
IN
IN
161.118.203.255
8/10
Confidence
100%
Reports
19
Location
SG
SG
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
221.139.88.149
10/10
Confidence
100%
Reports
168
ISP
SK Broadband Co...
27.119.7.6
8/10
Confidence
100%
Reports
64
ISP
SK Broadband Co...
115.178.75.242
10/10
Confidence
100%
Reports
43
ISP
SK Broadband Co...
211.228.218.47
10/10
Confidence
100%
Reports
41
ISP
Korea Telecom
221.159.21.88
10/10
Confidence
100%
Reports
37
ISP
Korea Telecom
14.46.58.104
8/10
Confidence
100%
Reports
14
ISP
Korea Telecom
220.71.199.64
10/10
Confidence
99%
Reports
155
ISP
Korea Telecom
121.168.139.251
10/10
Confidence
99%
Reports
146
ISP
Korea Telecom
175.118.127.138
10/10
Confidence
99%
Reports
80
ISP
SK Broadband Co...
1.222.42.237
10/10
Confidence
99%
Reports
77
ISP
LG DACOM Corpor...
121.179.119.204
8/10
Confidence
99%
Reports
68
ISP
Korea Telecom
220.119.37.141
10/10
Confidence
99%
Reports
57
ISP
Korea Telecom
119.205.179.217
10/10
Confidence
99%
Reports
56
ISP
Korea Telecom
14.63.217.28
10/10
Confidence
99%
Reports
56
ISP
Korea Telecom
112.217.199.222
10/10
Confidence
99%
Reports
42
ISP
LG DACOM Corpor...
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.8.59.250
10/10
Confidence
99%
Reports
206
Location
ID
ID
77.90.185.37
8/10
Confidence
99%
Reports
202
Location
DE
DE
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP
220.71.199.64
10/10
Confidence
99%
Reports
155
Location
KR
KR
87.121.84.81
8/10
Confidence
99%
Reports
152
Location
US
US
121.200.217.28
8/10
Confidence
99%
Reports
151
Location
VN
VN
121.168.139.251
10/10
Confidence
99%
Reports
146
Location
KR
KR
38.95.35.85
8/10
Confidence
99%
Reports
133
Location
US
US
196.189.237.92
10/10
Confidence
99%
Reports
111
Location
ET
ET
34.39.58.191
8/10
Confidence
99%
Reports
108
Location
GB
GB
141.148.33.145
10/10
Confidence
99%
Reports
104
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203