Extreme Threat
IP 38.114.121.110 classified at threat level 10/10 with 61 documented attacks.
Advanced threat indicators confirmed with 76% certainty.
More threatening than 94% of monitored IPs
IP Address
38.114.121.110
IPv4
Public
US
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
US
Location
AS-GLOBALTELEHOST
ASN 63023
61
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
3
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 63023) with generally good reputation. The ISP AS-GLOBALTELEHOST maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
71%
High Confidence
Confidence History
1. Mar 2026 - 11. Apr 2026
76%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 38.114.121.110
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
US
- ASN
- AS63023
- ISP
- AS-GLOBALTELEHOST
DNS Information
- Reverse DNS
- 110-121-114-38.clients.gthost.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 61
- First Reported
- 18 Feb 2026
- Last Reported
- 11 Apr 2026, 18:36
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS63023
GTHost
US
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
19
Total IPs Monitored
404
Total Reports
21.3
Reports per IP
Network Context
This IP address belongs to GTHost (AS63023), which manages 19 IP addresses in our monitoring system. Out of these, 404 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
94
%
Global Threat Ranking
This IP is more threatening than 94% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,532 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
61
avg: 23
++
Network Comparison
Compared against 31 IPs in ASN 63023
Threat Level
10/10
network avg: 5.8
++
Total Reports
61
network avg: 15
++
Network AS-GLOBALTELEHOST has overall threat level 1/10
Geographic Comparison
Compared against 38,456 IPs in US
Threat Level
10/10
country avg: 5.9
++
Total Reports
61
country avg: 41
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
60
Hacking
3
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
187,269 threat incidents tracked globally • Last 24h: 19,041 Logs
FEED
Top Threat Sources
-
01
United States38,456 20.5%
-
02
India29,090 15.5% -
03
China26,026 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.5/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
66.163.112.172
10/10
Confidence
94%
Reports
91
Location
US
US
192.166.225.27
10/10
Confidence
94%
Reports
68
Location
NL
NL
216.39.249.44
10/10
Confidence
94%
Reports
47
Location
US
US
186.190.215.90
10/10
Confidence
94%
Reports
24
Location
CH
CH
82.22.21.41
10/10
Confidence
87%
Reports
26
Location
DE
DE
38.110.1.185
10/10
Confidence
84%
Reports
17
Location
US
US
66.163.122.211
10/10
Confidence
80%
Reports
70
Location
US
US
134.195.199.35
8/10
Confidence
61%
Reports
5
Location
CH
CH
67.220.72.237
0/10
Confidence
51%
Reports
3
Location
US
US
38.114.114.200
10/10
Confidence
49%
Reports
4
Location
US
US
194.87.87.102
7/10
Confidence
40%
Reports
2
Location
NL
NL
167.88.62.74
7/10
Confidence
38%
Reports
1
Location
US
US
216.106.179.248
0/10
Confidence
37%
Reports
2
Location
US
US
216.106.178.6
7/10
Confidence
35%
Reports
4
Location
US
US
167.17.66.82
0/10
Confidence
30%
Reports
3
Location
US
US
216.106.187.120
7/10
Confidence
30%
Reports
1
Location
DE
DE
216.152.152.32
0/10
Confidence
30%
Reports
1
Location
US
US
67.220.67.97
7/10
Confidence
30%
Reports
1
Location
US
US
170.168.103.156
7/10
Confidence
30%
Reports
1
Location
DE
DE
5.180.23.19
0/10
Confidence
30%
Reports
1
Location
US
US
IPs from the same country with similar threat profiles.
15
Related IPs
8.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
208.109.188.137
8/10
Confidence
100%
Reports
514
ISP
GO-DADDY-COM-LLC
50.6.7.129
8/10
Confidence
100%
Reports
447
ISP
ORACLE-BMC-31898
72.167.150.128
8/10
Confidence
100%
Reports
429
ISP
GO-DADDY-COM-LLC
50.6.229.148
8/10
Confidence
100%
Reports
346
ISP
ORACLE-BMC-31898
87.121.84.30
8/10
Confidence
100%
Reports
295
ISP
Vpsvault.host Ltd
50.6.226.221
10/10
Confidence
100%
Reports
223
ISP
ORACLE-BMC-31898
31.57.184.107
8/10
Confidence
100%
Reports
202
ISP
Netiface LLC
64.31.25.250
8/10
Confidence
100%
Reports
176
ISP
Limestone Netwo...
74.206.180.196
8/10
Confidence
100%
Reports
143
ISP
MOJOHOST
35.226.7.126
8/10
Confidence
100%
Reports
131
ISP
Google LLC
147.135.37.185
8/10
Confidence
100%
Reports
131
ISP
OVH SAS
162.241.152.21
8/10
Confidence
100%
Reports
126
ISP
Network Solutio...
38.95.35.74
8/10
Confidence
100%
Reports
112
ISP
Limestone Netwo...
50.6.169.131
8/10
Confidence
100%
Reports
106
ISP
Network Solutio...
162.214.206.32
10/10
Confidence
100%
Reports
98
ISP
Unified Layer
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
76%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
186.96.145.241
10/10
Confidence
76%
Reports
25,448
Location
MX
MX
207.90.244.10
8/10
Confidence
76%
Reports
21,407
Location
US
US
159.89.124.112
8/10
Confidence
76%
Reports
12,043
Location
CA
CA
185.156.73.166
7/10
Confidence
76%
Reports
2,518
Location
UA
UA
194.107.115.199
10/10
Confidence
76%
Reports
1,957
Location
UZ
UZ
80.94.92.68
10/10
Confidence
76%
Reports
1,485
Location
RO
RO
184.105.247.194
8/10
Confidence
76%
Reports
1,352
Location
US
US
71.6.135.131
8/10
Confidence
76%
Reports
866
Location
US
US
216.126.229.7
10/10
Confidence
76%
Reports
856
Location
DE
DE
45.156.87.211
10/10
Confidence
76%
Reports
846
Location
NL
NL
78.153.140.39
10/10
Confidence
76%
Reports
804
Location
GB
GB
78.153.140.149
10/10
Confidence
76%
Reports
753
Location
GB
GB
146.70.124.165
10/10
Confidence
76%
Reports
749
Location
RO
RO
91.224.92.125
10/10
Confidence
76%
Reports
713
Location
GB
GB
103.86.198.162
10/10
Confidence
76%
Reports
683
Location
BD
BD
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203