Extreme Threat
IP 103.123.53.88 classified at threat level 10/10 with 114 documented attacks.
Advanced threat indicators confirmed with 93% certainty.
More threatening than 97% of monitored IPs
IP Address
103.123.53.88
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
IN
Location
YOTTA NETWORK SERVICES PR...
ASN 140641
114
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
14
Exploited Host
6
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
15. May 2026
Last Activity
9. June 2026
Recent (7 days)
12 incidents
Reputable Network
This IP is hosted on a network (ASN 140641) with generally good reputation. The ISP YOTTA NETWORK SERVICES PRIVATE LIMITED maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
93%
Verified
Confidence History
17. Apr 2026 - 9. Jun 2026
93%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Exploited Host | Honeypot | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH | Honeypot | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | Hacking SSH | Honeypot x2 | 75% |
| New | SSH Hacking Exploited Host | Honeypot x3 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Exploited Host SSH Hacking | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.123.53.88
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS140641
- ISP
- YOTTA NETWORK SERVICES PRIVATE LIMITED
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 114
- First Reported
- 19 Feb 2026
- Last Reported
- 9 Jun 2026, 07:42
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS140641
YOTTA NETWORK SERVICES PRIVATE LIMITED
IN
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
6
Total IPs Monitored
269
Total Reports
44.8
Reports per IP
Network Context
This IP address belongs to YOTTA NETWORK SERVICES PRIVATE LIMITED (AS140641), which manages 6 IP addresses in our monitoring system. Out of these, 269 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,500 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
114
avg: 23
++
Network Comparison
Compared against 12 IPs in ASN 140641
Threat Level
10/10
network avg: 7.3
+
Total Reports
114
network avg: 42
++
Network YOTTA NETWORK SERVICES PRIVATE LIMITED has overall threat level 3/10
Geographic Comparison
Compared against 29,090 IPs in IN
Threat Level
10/10
country avg: 5.4
++
Total Reports
114
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Jun 2026
6 reports
Daily Average
0.7
reports/day
Most Active
Tuesday
23 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
111
Hacking
15
Exploited Host
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 13 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5%
-
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
11
Related IPs
7.1/10
Avg Threat
68%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
160.250.204.105
8/10
Confidence
100%
Reports
41
Location
IN
IN
185.100.212.141
10/10
Confidence
97%
Reports
118
Location
IN
IN
103.91.246.101
10/10
Confidence
93%
Reports
93
Location
IN
IN
103.91.245.241
8/10
Confidence
92%
Reports
93
Location
IN
IN
103.19.136.6
8/10
Confidence
92%
Reports
11
Location
IN
IN
103.91.246.73
10/10
Confidence
88%
Reports
20
Location
IN
IN
160.250.204.33
10/10
Confidence
56%
Reports
4
Location
IN
IN
160.250.204.237
7/10
Confidence
38%
Reports
1
Location
IN
IN
103.152.79.199
7/10
Confidence
36%
Reports
2
Location
IN
IN
103.25.128.128
0/10
Confidence
30%
Reports
1
Location
IN
IN
103.93.94.155
0/10
Confidence
29%
Reports
1
Location
IN
IN
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
273
ISP
Micro Hosting P...
188.241.62.83
8/10
Confidence
100%
Reports
188
ISP
LEAPSWITCH NETW...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
43.230.201.87
8/10
Confidence
100%
Reports
86
ISP
LEAPSWITCH NETW...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
142.93.215.41
8/10
Confidence
100%
Reports
81
ISP
DigitalOcean, LLC
203.192.232.180
10/10
Confidence
100%
Reports
72
ISP
ONEOTT INTERTAI...
122.180.21.11
10/10
Confidence
100%
Reports
67
ISP
Bharti Airtel L...
111.93.186.150
10/10
Confidence
100%
Reports
67
ISP
Tata Teleservic...
45.123.110.70
10/10
Confidence
100%
Reports
66
ISP
WISH NET PRIVAT...
59.97.138.72
10/10
Confidence
100%
Reports
61
ISP
National Intern...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
103.38.219.22
10/10
Confidence
100%
Reports
55
ISP
HEGHESCOM NETWO...
183.82.98.154
8/10
Confidence
100%
Reports
54
ISP
Atria Convergen...
112.196.0.228
8/10
Confidence
100%
Reports
51
ISP
Quadrant Televe...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.149.31
10/10
Confidence
93%
Reports
4,020
Location
NL
NL
45.205.1.5
10/10
Confidence
93%
Reports
2,950
Location
MU
MU
46.151.178.13
8/10
Confidence
93%
Reports
2,753
Location
NL
NL
200.124.160.2
10/10
Confidence
93%
Reports
2,116
Location
MX
MX
80.66.83.43
10/10
Confidence
93%
Reports
1,976
Location
RU
RU
130.12.181.98
8/10
Confidence
93%
Reports
1,224
Location
DE
DE
91.92.240.13
8/10
Confidence
93%
Reports
841
Location
DE
DE
5.83.143.40
10/10
Confidence
93%
Reports
823
Location
NL
NL
160.119.76.4
8/10
Confidence
93%
Reports
820
Location
SC
SC
103.56.148.184
10/10
Confidence
93%
Reports
634
Location
ID
ID
185.224.128.16
10/10
Confidence
93%
Reports
609
Location
NL
NL
185.156.73.157
10/10
Confidence
93%
Reports
525
Location
UA
UA
80.94.95.83
10/10
Confidence
93%
Reports
488
Location
RO
RO
154.239.6.163
8/10
Confidence
93%
Reports
470
Location
EG
EG
5.83.143.80
10/10
Confidence
93%
Reports
461
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203