Critical Alert
Security alert: 103.118.17.109 rated 10/10 based on 26 verified incidents.
Threat profile indicates sustained malicious activity with 92% confidence rating.
More threatening than 97% of monitored IPs
IP Address
103.118.17.109
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
IN
Location
WHG Hosting Services Ltd
ASN 199404
26
Reports
Honeypot
Data Source
Threat Categories
Hacking
26
SSH
26
Exploited Host
11
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 199404) with generally good reputation. The ISP WHG Hosting Services Ltd maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
1/10
Very Low
Confidence Score
76%
Verified
Confidence History
12. Apr 2026 - 23. Apr 2026
92%
Current
Stable
Trend
Security Reports (26)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 103.118.17.109
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS199404
- ISP
- WHG Hosting Services Ltd
DNS Information
- Reverse DNS
- 735601-NewAdmin.tezmatka.in
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 26
- First Reported
- 12 Apr 2026
- Last Reported
- 23 Apr 2026, 00:04
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS199404
WHG Hosting Services Ltd
IN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
10
Total IPs Monitored
172
Total Reports
17.2
Reports per IP
Network Context
This IP address belongs to WHG Hosting Services Ltd (AS199404), which manages 10 IP addresses in our monitoring system. Out of these, 172 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,982 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
26
avg: 23
=
Network Comparison
Compared against 20 IPs in ASN 199404
Threat Level
10/10
network avg: 8.4
+
Total Reports
26
network avg: 13
++
Network WHG Hosting Services Ltd has overall threat level 3/10
Geographic Comparison
Compared against 29,262 IPs in IN
Threat Level
10/10
country avg: 5.4
++
Total Reports
26
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
26
Hacking
26
Exploited Host
11
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,879 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5% -
02
India29,222 15.6%
-
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
19
Related IPs
8.3/10
Avg Threat
57%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
195.250.21.26
8/10
Confidence
100%
Reports
26
Location
IN
IN
195.250.20.172
8/10
Confidence
100%
Reports
19
Location
IN
IN
195.250.20.75
8/10
Confidence
96%
Reports
37
Location
IN
IN
198.38.85.149
10/10
Confidence
94%
Reports
20
Location
IN
IN
198.38.81.1
10/10
Confidence
93%
Reports
22
Location
IN
IN
198.38.85.76
10/10
Confidence
86%
Reports
12
Location
IN
IN
69.57.172.212
10/10
Confidence
68%
Reports
8
Location
IN
IN
198.38.81.62
8/10
Confidence
61%
Reports
5
Location
IN
IN
69.57.172.119
8/10
Confidence
56%
Reports
5
Location
IN
IN
198.38.81.14
8/10
Confidence
56%
Reports
4
Location
IN
IN
190.92.175.228
10/10
Confidence
53%
Reports
22
Location
IN
IN
190.92.174.21
8/10
Confidence
46%
Reports
4
Location
IN
IN
195.250.21.212
10/10
Confidence
38%
Reports
8
Location
IN
IN
69.57.172.96
10/10
Confidence
32%
Reports
22
Location
IN
IN
190.92.174.127
7/10
Confidence
30%
Reports
1
Location
IN
IN
195.250.30.134
7/10
Confidence
29%
Reports
1
Location
IN
IN
190.92.175.38
7/10
Confidence
17%
Reports
1
Location
IN
IN
195.250.31.127
4/10
Confidence
15%
Reports
1
Location
IN
IN
198.38.84.9
7/10
Confidence
12%
Reports
15
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
278
ISP
Micro Hosting P...
188.241.62.83
8/10
Confidence
100%
Reports
188
ISP
LEAPSWITCH NETW...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
43.230.201.87
8/10
Confidence
100%
Reports
86
ISP
LEAPSWITCH NETW...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
142.93.215.41
8/10
Confidence
100%
Reports
83
ISP
DigitalOcean, LLC
203.192.232.180
10/10
Confidence
100%
Reports
72
ISP
ONEOTT INTERTAI...
122.180.21.11
10/10
Confidence
100%
Reports
67
ISP
Bharti Airtel L...
111.93.186.150
10/10
Confidence
100%
Reports
67
ISP
Tata Teleservic...
45.123.110.70
10/10
Confidence
100%
Reports
66
ISP
WISH NET PRIVAT...
59.97.138.72
10/10
Confidence
100%
Reports
61
ISP
National Intern...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
103.38.219.22
10/10
Confidence
100%
Reports
55
ISP
HEGHESCOM NETWO...
183.82.98.154
8/10
Confidence
100%
Reports
54
ISP
Atria Convergen...
112.196.0.228
8/10
Confidence
100%
Reports
51
ISP
Quadrant Televe...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
176.65.149.27
10/10
Confidence
92%
Reports
3,993
Location
NL
NL
51.159.110.167
10/10
Confidence
92%
Reports
1,522
Location
FR
FR
31.70.66.9
8/10
Confidence
92%
Reports
708
Location
DE
DE
5.39.101.60
8/10
Confidence
92%
Reports
664
Location
FR
FR
207.90.244.12
10/10
Confidence
92%
Reports
545
Location
US
US
167.94.146.50
8/10
Confidence
92%
Reports
468
Location
US
US
87.106.98.147
8/10
Confidence
92%
Reports
455
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
434
Location
DE
DE
172.245.112.205
10/10
Confidence
92%
Reports
428
Location
US
US
217.160.24.45
8/10
Confidence
92%
Reports
422
Location
DE
DE
185.242.226.104
10/10
Confidence
92%
Reports
419
Location
US
US
87.106.78.3
8/10
Confidence
92%
Reports
417
Location
DE
DE
167.94.146.61
10/10
Confidence
92%
Reports
415
Location
US
US
185.132.46.108
8/10
Confidence
92%
Reports
410
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203