Critical Alert
Security alert: 120.211.158.107 rated 10/10 based on 10 verified incidents.
Threat profile indicates sustained malicious activity with 53% confidence rating.
More threatening than 88% of monitored IPs
IP Address
120.211.158.107
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
Hebei Mobile Communicatio...
ASN 24547
10
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
10
Hacking
1
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Moderate Network Risk
The network hosting this IP (ASN 24547, operated by Hebei Mobile Communication Company Limited) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
49%
Medium Confidence
Confidence History
22. Jan 2026 - 29. Mar 2026
53%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot x3 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot x3 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot x3 | 75% | |
| Exploited Host | Honeypot x3 | 75% | |
| Exploited Host | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 120.211.158.107
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS24547
- ISP
- Hebei Mobile Communication Company Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 10
- First Reported
- 22 Jan 2026
- Last Reported
- 29 Mar 2026, 06:22
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24547
Hebei Mobile Communication Company Limited
CN
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
80
Total IPs Monitored
1,718
Total Reports
21.5
Reports per IP
Network Context
This IP address belongs to Hebei Mobile Communication Company Limited (AS24547), which manages 80 IP addresses in our monitoring system. Out of these, 1,718 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,471 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
10
avg: 23
--
Network Comparison
Compared against 86 IPs in ASN 24547
Threat Level
10/10
network avg: 5.0
++
Total Reports
10
network avg: 20
--
Network Hebei Mobile Communication Company Limited has overall threat level 5/10
Geographic Comparison
Compared against 26,021 IPs in CN
Threat Level
10/10
country avg: 3.7
++
Total Reports
10
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
10
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 22:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9%
-
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
59%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
183.199.174.188
10/10
Confidence
94%
Reports
27
Location
CN
CN
120.211.32.165
10/10
Confidence
88%
Reports
33
Location
CN
CN
111.61.77.252
10/10
Confidence
77%
Reports
83
Location
CN
CN
39.144.91.193
10/10
Confidence
73%
Reports
335
Location
CN
CN
183.196.84.194
10/10
Confidence
73%
Reports
15
Location
CN
CN
111.61.229.78
10/10
Confidence
70%
Reports
1,065
Location
CN
CN
120.211.212.234
10/10
Confidence
70%
Reports
14
Location
CN
CN
120.211.109.194
10/10
Confidence
69%
Reports
27
Location
CN
CN
111.62.173.90
7/10
Confidence
59%
Reports
8
Location
CN
CN
111.61.102.228
10/10
Confidence
56%
Reports
4
Location
CN
CN
183.196.106.220
10/10
Confidence
56%
Reports
4
Location
CN
CN
36.144.74.33
0/10
Confidence
54%
Reports
7
Location
CN
CN
36.144.74.39
7/10
Confidence
54%
Reports
6
Location
CN
CN
36.144.72.180
8/10
Confidence
43%
Reports
4
Location
CN
CN
120.211.217.218
10/10
Confidence
42%
Reports
6
Location
CN
CN
218.207.85.33
10/10
Confidence
40%
Reports
5
Location
CN
CN
183.196.224.166
10/10
Confidence
40%
Reports
4
Location
CN
CN
211.143.78.13
0/10
Confidence
40%
Reports
2
Location
CN
CN
183.196.189.144
10/10
Confidence
38%
Reports
7
Location
CN
CN
183.196.198.6
7/10
Confidence
36%
Reports
2
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.157.77.71
10/10
Confidence
100%
Reports
113
ISP
China Mobile Co...
112.11.230.160
10/10
Confidence
100%
Reports
104
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.82.42.202
10/10
Confidence
100%
Reports
102
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
77
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
76
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
67
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
65
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
218.90.157.62
10/10
Confidence
100%
Reports
59
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
218.92.102.178
10/10
Confidence
100%
Reports
59
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
46
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
43
ISP
China Telecom G...
IPs with similar threat level and confidence scores.
15
Related IPs
8.1/10
Avg Threat
53%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
199.195.249.231
7/10
Confidence
53%
Reports
203
Location
US
US
107.189.30.53
7/10
Confidence
53%
Reports
164
Location
LU
LU
192.42.116.214
8/10
Confidence
53%
Reports
77
Location
NL
NL
95.85.238.19
7/10
Confidence
53%
Reports
60
Location
CZ
CZ
110.39.1.22
7/10
Confidence
53%
Reports
32
Location
PK
PK
121.200.216.13
10/10
Confidence
53%
Reports
32
Location
VN
VN
190.92.175.228
10/10
Confidence
53%
Reports
22
Location
IN
IN
103.171.117.54
7/10
Confidence
53%
Reports
21
Location
IN
IN
103.160.241.136
7/10
Confidence
53%
Reports
21
Location
IN
IN
103.93.105.155
7/10
Confidence
53%
Reports
20
Location
IN
IN
45.156.87.40
10/10
Confidence
53%
Reports
16
Location
NL
NL
8.221.137.196
10/10
Confidence
53%
Reports
14
Location
JP
JP
160.30.212.117
8/10
Confidence
53%
Reports
14
Location
MM
MM
111.92.47.70
8/10
Confidence
53%
Reports
13
Location
IN
IN
41.75.1.9
8/10
Confidence
53%
Reports
13
Location
BW
BW
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203