Critical Alert
Security alert: 106.14.183.112 rated 10/10 based on 44 verified incidents.
Threat profile indicates sustained malicious activity with 87% confidence rating.
More threatening than 96% of monitored IPs
IP Address
106.14.183.112
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CN
Location
Hangzhou Alibaba Advertis...
ASN 37963
44
Reports
Honeypot
Data Source
Threat Categories
Hacking
23
SSH
21
Exploited Host
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
23. May 2026
Last Activity
23. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 37963) with generally good reputation. The ISP Hangzhou Alibaba Advertising Co.,Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
77%
Verified
Confidence History
28. Jan 2026 - 23. May 2026
87%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH Exploited Host | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Exploited Host | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking SSH | Honeypot x28 | 75% | |
| Hacking SSH | Honeypot x70 | 75% | |
| Hacking SSH | Honeypot x111 | 75% | |
| Hacking SSH | Honeypot x108 | 75% | |
| Hacking SSH | Honeypot x54 | 75% | |
| Hacking SSH | Honeypot x85 | 75% | |
| Hacking SSH | Honeypot x33 | 75% | |
| Hacking | Honeypot x30 | 75% | |
| SSH Hacking | Honeypot x62 | 75% | |
| Hacking SSH | Honeypot x112 | 75% |
Technical Details
Basic Information
- IP Address
- 106.14.183.112
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS37963
- ISP
- Hangzhou Alibaba Advertising Co.,Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 44
- First Reported
- 28 Jan 2026
- Last Reported
- 23 May 2026, 09:22
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37963
Hangzhou Alibaba Advertising Co.,Ltd.
CN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
616
Total IPs Monitored
5,895
Total Reports
9.6
Reports per IP
Network Context
This IP address belongs to Hangzhou Alibaba Advertising Co.,Ltd. (AS37963), which manages 616 IP addresses in our monitoring system. Out of these, 5,895 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,847 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
44
avg: 23
++
Network Comparison
Compared against 832 IPs in ASN 37963
Threat Level
10/10
network avg: 5.5
++
Total Reports
44
network avg: 7
++
Network Hangzhou Alibaba Advertising Co.,Ltd. has overall threat level 3/10
Geographic Comparison
Compared against 26,036 IPs in CN
Threat Level
10/10
country avg: 3.7
++
Total Reports
44
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
23 May 2026
9 reports
Daily Average
0.3
reports/day
Most Active
Wednesday
24 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
37
SSH
32
Exploited Host
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 11 reports
Weekly Activity
Geographic Threat Distribution
187,519 threat incidents tracked globally • Last 24h: 18,988 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,036 13.9%
-
04
Brazil10,259 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.7/10
Avg Threat
90%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
47.113.195.173
10/10
Confidence
94%
Reports
226
Location
CN
CN
116.62.163.184
10/10
Confidence
94%
Reports
43
Location
CN
CN
121.43.178.245
10/10
Confidence
94%
Reports
35
Location
CN
CN
101.200.242.201
10/10
Confidence
94%
Reports
16
Location
CN
CN
120.26.202.34
10/10
Confidence
94%
Reports
14
Location
CN
CN
39.104.134.58
8/10
Confidence
93%
Reports
35
Location
CN
CN
39.105.202.192
8/10
Confidence
93%
Reports
31
Location
CN
CN
8.154.2.19
8/10
Confidence
93%
Reports
28
Location
CN
CN
118.178.186.103
10/10
Confidence
90%
Reports
19
Location
CN
CN
121.196.193.173
10/10
Confidence
90%
Reports
19
Location
CN
CN
47.103.157.194
10/10
Confidence
90%
Reports
14
Location
CN
CN
121.40.220.252
10/10
Confidence
89%
Reports
23
Location
CN
CN
106.14.187.140
10/10
Confidence
88%
Reports
22
Location
CN
CN
101.201.38.226
10/10
Confidence
88%
Reports
12
Location
CN
CN
120.26.239.198
10/10
Confidence
87%
Reports
49
Location
CN
CN
121.199.17.165
10/10
Confidence
87%
Reports
34
Location
CN
CN
112.124.16.184
10/10
Confidence
87%
Reports
29
Location
CN
CN
112.74.45.130
10/10
Confidence
87%
Reports
20
Location
CN
CN
106.14.123.114
10/10
Confidence
87%
Reports
20
Location
CN
CN
101.132.80.207
10/10
Confidence
86%
Reports
21
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.157.77.71
10/10
Confidence
100%
Reports
113
ISP
China Mobile Co...
112.11.230.160
10/10
Confidence
100%
Reports
104
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.82.42.202
10/10
Confidence
100%
Reports
102
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
77
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
76
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
67
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
65
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
218.92.102.178
10/10
Confidence
100%
Reports
59
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
46
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
43
ISP
China Telecom G...
14.29.214.161
10/10
Confidence
100%
Reports
42
ISP
Chinanet
IPs with similar threat level and confidence scores.
15
Related IPs
8.1/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.27
8/10
Confidence
87%
Reports
9,899
Location
US
US
137.184.32.56
8/10
Confidence
87%
Reports
6,904
Location
US
US
146.190.153.30
8/10
Confidence
87%
Reports
6,809
Location
US
US
24.199.126.56
8/10
Confidence
87%
Reports
6,739
Location
US
US
209.38.70.156
8/10
Confidence
87%
Reports
6,699
Location
US
US
143.198.225.197
8/10
Confidence
87%
Reports
6,447
Location
US
US
64.89.160.82
8/10
Confidence
87%
Reports
1,099
Location
GB
GB
81.29.142.100
8/10
Confidence
87%
Reports
978
Location
RU
RU
130.12.180.65
10/10
Confidence
87%
Reports
824
Location
NL
NL
81.168.83.103
8/10
Confidence
87%
Reports
723
Location
GB
GB
62.60.130.169
7/10
Confidence
87%
Reports
701
Location
IR
IR
92.63.197.78
7/10
Confidence
87%
Reports
660
Location
UA
UA
167.94.146.51
10/10
Confidence
87%
Reports
646
Location
US
US
65.49.20.66
8/10
Confidence
87%
Reports
643
Location
US
US
178.16.54.141
7/10
Confidence
87%
Reports
578
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203