High Risk
IP 43.157.98.118 rated at threat level 8/10 based on 52 security reports.
Pattern analysis reveals concerning activity. Confidence: 99%.
More threatening than 83% of monitored IPs
IP Address
43.157.98.118
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
DE
Location
Tencent Building, Kejizho...
ASN 132203
52
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Brute-Force
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
25. May 2026
Last Activity
17. June 2026
Recent (7 days)
8 incidents
Reputable Network
This IP is hosted on a network (ASN 132203) with generally good reputation. The ISP Tencent Building, Kejizhongyi Avenue maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
99%
Verified
Confidence History
26. May 2026 - 17. Jun 2026
99%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 43.157.98.118
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS132203
- ISP
- Tencent Building, Kejizhongyi Avenue
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 52
- First Reported
- 5 Apr 2026
- Last Reported
- 17 Jun 2026, 23:04
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS132203
Tencent Building, Kejizhongyi Avenue
SG
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
624
Total IPs Monitored
33,655
Total Reports
53.9
Reports per IP
Network Context
This IP address belongs to Tencent Building, Kejizhongyi Avenue (AS132203), which manages 624 IP addresses in our monitoring system. Out of these, 33,655 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
83
%
Global Threat Ranking
This IP is more threatening than 83% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 220,136 reported IPs worldwide
Threat Level
8/10
avg: 5.5
+
Total Reports
52
avg: 22
++
Network Comparison
Compared against 1,560 IPs in ASN 132203
Threat Level
8/10
network avg: 7.5
=
Total Reports
52
network avg: 25
++
Network Tencent Building, Kejizhongyi Avenue has overall threat level 1/10
Geographic Comparison
Compared against 7,855 IPs in DE
Threat Level
8/10
country avg: 6.0
+
Total Reports
52
country avg: 58
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
8 reports
Daily Average
1.1
reports/day
Most Active
Tuesday
17 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
52
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
206,347 threat incidents tracked globally • Last 24h: 17,556 Logs
FEED
Top Threat Sources
-
01
United States42,568 20.6% -
02
India33,124 16.1% -
03
China27,715 13.4% -
04
Brazil11,127 5.4% -
05
Germany7,855 3.8%
-
06
Singapore6,836 3.3%
-
07
Indonesia6,137 3% -
08
Pakistan5,427 2.6% -
09
Russia5,224 2.5% -
10
Netherlands4,730 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.8/10
Avg Threat
99%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
43.165.185.71
10/10
Confidence
100%
Reports
56
Location
JP
JP
124.156.212.23
8/10
Confidence
100%
Reports
38
Location
JP
JP
43.135.135.17
10/10
Confidence
100%
Reports
33
Location
US
US
43.162.112.238
10/10
Confidence
100%
Reports
22
Location
US
US
43.166.242.149
10/10
Confidence
100%
Reports
21
Location
US
US
170.106.179.118
10/10
Confidence
100%
Reports
16
Location
US
US
49.51.228.166
10/10
Confidence
100%
Reports
12
Location
US
US
119.28.9.170
10/10
Confidence
99%
Reports
58
Location
HK
HK
101.32.128.193
10/10
Confidence
99%
Reports
47
Location
SG
SG
43.153.12.68
10/10
Confidence
99%
Reports
45
Location
US
US
43.157.163.155
10/10
Confidence
99%
Reports
34
Location
BR
BR
43.165.62.10
8/10
Confidence
99%
Reports
16
Location
DE
DE
129.226.213.238
10/10
Confidence
98%
Reports
49
Location
SG
SG
43.132.227.251
10/10
Confidence
98%
Reports
48
Location
HK
HK
43.133.191.75
10/10
Confidence
98%
Reports
33
Location
JP
JP
43.161.217.205
10/10
Confidence
98%
Reports
15
Location
HK
HK
43.156.26.234
10/10
Confidence
98%
Reports
15
Location
SG
SG
43.164.1.211
10/10
Confidence
98%
Reports
14
Location
TH
TH
43.157.226.112
10/10
Confidence
98%
Reports
12
Location
ID
ID
49.51.204.105
10/10
Confidence
98%
Reports
12
Location
US
US
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
78%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.92.11.94
8/10
Confidence
100%
Reports
274
ISP
Contabo GmbH
88.198.64.173
8/10
Confidence
100%
Reports
174
ISP
Hetzner Online ...
159.100.13.237
8/10
Confidence
100%
Reports
169
ISP
Ultahost, Inc.
5.83.135.249
8/10
Confidence
100%
Reports
146
ISP
active 1 GmbH
46.224.234.158
8/10
Confidence
100%
Reports
134
ISP
Hetzner Online ...
3.70.164.132
8/10
Confidence
100%
Reports
99
ISP
Amazon.com, Inc.
94.26.106.90
8/10
Confidence
100%
Reports
86
ISP
dataforest GmbH
49.12.3.147
10/10
Confidence
100%
Reports
78
ISP
Hetzner Online ...
94.26.106.111
10/10
Confidence
100%
Reports
75
ISP
dataforest GmbH
217.160.212.27
8/10
Confidence
100%
Reports
74
ISP
IONOS SE
80.158.109.51
10/10
Confidence
100%
Reports
73
ISP
T-Systems Inter...
5.83.135.102
8/10
Confidence
100%
Reports
70
ISP
AltunHOST LTD
212.224.100.2
10/10
Confidence
100%
Reports
61
ISP
firstcolo GmbH
94.26.106.216
8/10
Confidence
100%
Reports
59
ISP
dataforest GmbH
94.130.219.13
10/10
Confidence
100%
Reports
58
ISP
Hetzner Online ...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.198.224.141
8/10
Confidence
99%
Reports
355
Location
US
US
103.61.123.221
8/10
Confidence
99%
Reports
337
Location
VN
VN
85.204.70.106
8/10
Confidence
99%
Reports
281
Location
FR
FR
212.89.15.132
8/10
Confidence
99%
Reports
237
Location
ES
ES
103.216.117.42
8/10
Confidence
99%
Reports
191
Location
VN
VN
117.174.24.34
10/10
Confidence
99%
Reports
190
Location
CN
CN
121.200.217.27
8/10
Confidence
99%
Reports
169
Location
VN
VN
103.213.127.100
8/10
Confidence
99%
Reports
158
Location
NP
NP
87.121.84.81
8/10
Confidence
99%
Reports
152
Location
US
US
121.200.217.28
8/10
Confidence
99%
Reports
151
Location
VN
VN
121.168.139.251
10/10
Confidence
99%
Reports
146
Location
KR
KR
38.95.35.85
8/10
Confidence
99%
Reports
133
Location
US
US
93.14.117.117
10/10
Confidence
99%
Reports
116
Location
FR
FR
196.189.237.92
10/10
Confidence
99%
Reports
111
Location
ET
ET
34.39.58.191
8/10
Confidence
99%
Reports
108
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 24.199.126.56
- 209.38.131.131
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.64
- 139.59.170.85
- 193.32.162.28
- 80.94.92.183
- 176.65.149.224
- 178.128.32.203
- 176.65.149.230
- 165.227.172.206