Significant Threat
IP 43.242.201.138 identified as significant threat (8/10) from 47 events.
Multiple malicious indicators detected. Confidence level: 94%.
More threatening than 81% of monitored IPs
IP Address
43.242.201.138
IPv4
Public
HK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
HK
Location
cognetcloud INC
ASN 401696
47
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
SSH
30
Exploited Host
12
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 401696) with generally good reputation. The ISP cognetcloud INC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
78%
Verified
Confidence History
19. Apr 2026 - 3. May 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH Hacking Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 43.242.201.138
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
HK
- ASN
- AS401696
- ISP
- cognetcloud INC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 47
- First Reported
- 12 Apr 2026
- Last Reported
- 3 May 2026, 10:54
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS401696
cognetcloud INC
HK
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
40
Total IPs Monitored
865
Total Reports
21.6
Reports per IP
Network Context
This IP address belongs to cognetcloud INC (AS401696), which manages 40 IP addresses in our monitoring system. Out of these, 865 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,353 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
47
avg: 23
++
Network Comparison
Compared against 46 IPs in ASN 401696
Threat Level
8/10
network avg: 6.0
+
Total Reports
47
network avg: 17
++
Network cognetcloud INC has overall threat level 3/10
Geographic Comparison
Compared against 2,681 IPs in HK
Threat Level
8/10
country avg: 6.1
+
Total Reports
47
country avg: 45
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
47
SSH
47
Exploited Host
20
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
187,017 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,426 20.5% -
02
India28,977 15.5% -
03
China26,016 13.9% -
04
Brazil10,249 5.5% -
05
Germany7,139 3.8% -
06
Singapore6,475 3.5% -
07
Indonesia5,533 3% -
08
Russia4,701 2.5% -
09
Pakistan4,647 2.5% -
10
Netherlands4,355 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
75%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
103.106.188.32
10/10
Confidence
100%
Reports
37
Location
HK
HK
103.97.179.160
10/10
Confidence
98%
Reports
31
Location
HK
HK
156.238.246.218
8/10
Confidence
97%
Reports
24
Location
SC
SC
103.233.255.229
8/10
Confidence
95%
Reports
13
Location
SG
SG
156.238.236.46
10/10
Confidence
94%
Reports
17
Location
SC
SC
43.242.203.160
8/10
Confidence
93%
Reports
26
Location
HK
HK
156.225.18.240
10/10
Confidence
77%
Reports
89
Location
SC
SC
45.207.214.179
10/10
Confidence
76%
Reports
29
Location
MU
MU
45.207.198.228
10/10
Confidence
75%
Reports
24
Location
MU
MU
103.116.246.121
10/10
Confidence
74%
Reports
30
Location
HK
HK
103.85.227.131
10/10
Confidence
70%
Reports
18
Location
HK
HK
156.238.246.148
10/10
Confidence
70%
Reports
9
Location
SC
SC
103.85.226.34
10/10
Confidence
68%
Reports
5
Location
CN
CN
154.219.118.124
10/10
Confidence
63%
Reports
270
Location
HK
HK
43.251.226.210
10/10
Confidence
63%
Reports
39
Location
HK
HK
149.88.85.208
8/10
Confidence
63%
Reports
9
Location
HK
HK
103.149.201.84
10/10
Confidence
62%
Reports
5
Location
HK
HK
156.238.242.160
8/10
Confidence
55%
Reports
5
Location
SC
SC
154.12.26.241
0/10
Confidence
55%
Reports
4
Location
US
US
103.97.176.199
0/10
Confidence
51%
Reports
3
Location
HK
HK
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
65.52.167.153
8/10
Confidence
100%
Reports
79
ISP
MICROSOFT-CORP-...
165.154.41.13
7/10
Confidence
100%
Reports
79
ISP
ZEN-DPS
165.154.22.6
8/10
Confidence
100%
Reports
52
ISP
UCLOUD INFORMAT...
119.28.9.170
10/10
Confidence
100%
Reports
51
ISP
Tencent Buildin...
45.249.246.120
8/10
Confidence
100%
Reports
51
ISP
UCLOUD INFORMAT...
165.154.6.26
10/10
Confidence
100%
Reports
49
ISP
UCLOUD INFORMAT...
152.32.130.174
10/10
Confidence
100%
Reports
47
ISP
UCLOUD INFORMAT...
165.154.6.104
10/10
Confidence
100%
Reports
41
ISP
UCLOUD INFORMAT...
152.32.130.144
10/10
Confidence
100%
Reports
38
ISP
UCLOUD INFORMAT...
103.106.188.32
10/10
Confidence
100%
Reports
37
ISP
cognetcloud INC
165.154.5.148
10/10
Confidence
100%
Reports
33
ISP
UCLOUD INFORMAT...
152.32.213.101
8/10
Confidence
100%
Reports
26
ISP
UCLOUD INFORMAT...
144.48.243.18
10/10
Confidence
100%
Reports
21
ISP
Overcasts Limited
154.83.13.181
10/10
Confidence
100%
Reports
21
ISP
YISU CLOUD LTD
165.154.23.26
10/10
Confidence
100%
Reports
19
ISP
UCLOUD INFORMAT...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
51.68.207.118
10/10
Confidence
94%
Reports
5,252
Location
FR
FR
185.246.128.133
10/10
Confidence
94%
Reports
5,109
Location
SE
SE
185.233.247.245
8/10
Confidence
94%
Reports
3,686
Location
TR
TR
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
66.132.172.162
10/10
Confidence
94%
Reports
3,322
Location
US
US
66.132.172.165
10/10
Confidence
94%
Reports
3,320
Location
US
US
66.132.172.175
10/10
Confidence
94%
Reports
3,314
Location
US
US
66.132.172.164
10/10
Confidence
94%
Reports
3,304
Location
US
US
66.132.172.167
10/10
Confidence
94%
Reports
3,300
Location
US
US
66.132.172.171
10/10
Confidence
94%
Reports
3,284
Location
US
US
66.132.172.160
8/10
Confidence
94%
Reports
3,269
Location
US
US
66.132.172.161
10/10
Confidence
94%
Reports
3,268
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203