Notable Threat
IP 103.99.206.40 rated 8/10 from 9 verified reports.
Multiple security incidents attributed to this IP. Confidence: 49%.
More threatening than 76% of monitored IPs
IP Address
103.99.206.40
IPv4
Public
IN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
IN
Location
Kerala Vision Broad Band ...
ASN 138754
9
Reports
Honeypot
Data Source
Threat Categories
SSH
9
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 138754) with generally good reputation. The ISP Kerala Vision Broad Band Private Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
46%
Medium Confidence
Confidence History
27. Feb 2026 - 1. Mar 2026
49%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 103.99.206.40
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
IN
- ASN
- AS138754
- ISP
- Kerala Vision Broad Band Private Limited
DNS Information
- Reverse DNS
- keralavisionisp-dynamic-40.206.99.103.keralavisionisp.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 9
- First Reported
- 27 Feb 2026
- Last Reported
- 2 Mar 2026, 00:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS138754
Kerala Vision Broad Band Private Limited
IN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
25
Total IPs Monitored
331
Total Reports
13.2
Reports per IP
Network Context
This IP address belongs to Kerala Vision Broad Band Private Limited (AS138754), which manages 25 IP addresses in our monitoring system. Out of these, 331 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
76
%
Global Threat Ranking
This IP is more threatening than 76% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,746 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
9
avg: 23
--
Network Comparison
Compared against 197 IPs in ASN 138754
Threat Level
8/10
network avg: 5.5
+
Total Reports
9
network avg: 3
++
Network Kerala Vision Broad Band Private Limited has overall threat level 2/10
Geographic Comparison
Compared against 29,138 IPs in IN
Threat Level
8/10
country avg: 5.4
+
Total Reports
9
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6%
-
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.6/10
Avg Threat
52%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
103.99.144.99
10/10
Confidence
95%
Reports
171
Location
IN
IN
137.59.84.103
8/10
Confidence
87%
Reports
17
Location
IN
IN
103.99.206.83
10/10
Confidence
78%
Reports
27
Location
IN
IN
103.76.162.13
10/10
Confidence
69%
Reports
25
Location
IN
IN
103.161.55.25
10/10
Confidence
68%
Reports
74
Location
IN
IN
103.153.105.116
10/10
Confidence
62%
Reports
5
Location
IN
IN
103.146.174.129
8/10
Confidence
49%
Reports
7
Location
IN
IN
103.182.167.128
8/10
Confidence
48%
Reports
4
Location
IN
IN
2403:a080:c04:6dc2:311b:77a9:9882:2a9f
8/10
Confidence
48%
Reports
3
Location
IN
IN
2403:a080:c04:1d54:88fc:f7ca:ad4b:f909
7/10
Confidence
40%
Reports
2
Location
IN
IN
2403:a080:803:191b:8c84:359b:175f:b613
7/10
Confidence
40%
Reports
2
Location
IN
IN
103.170.55.20
0/10
Confidence
40%
Reports
2
Location
IN
IN
137.59.87.243
7/10
Confidence
40%
Reports
2
Location
IN
IN
103.139.64.224
0/10
Confidence
40%
Reports
2
Location
IN
IN
103.170.55.101
0/10
Confidence
40%
Reports
2
Location
IN
IN
103.153.105.119
0/10
Confidence
40%
Reports
2
Location
IN
IN
103.161.55.61
7/10
Confidence
38%
Reports
2
Location
IN
IN
137.59.87.140
7/10
Confidence
38%
Reports
2
Location
IN
IN
103.161.144.255
7/10
Confidence
36%
Reports
4
Location
IN
IN
103.161.55.227
7/10
Confidence
35%
Reports
4
Location
IN
IN
IPs from the same subnet range, likely same network segment.
1
Related IPs
10/10
Avg Threat
78%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.8/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.127.30.137
8/10
Confidence
100%
Reports
274
ISP
Micro Hosting P...
188.241.62.83
8/10
Confidence
100%
Reports
188
ISP
LEAPSWITCH NETW...
167.71.226.156
8/10
Confidence
100%
Reports
161
ISP
DigitalOcean, LLC
43.230.201.87
8/10
Confidence
100%
Reports
86
ISP
LEAPSWITCH NETW...
188.241.62.65
8/10
Confidence
100%
Reports
84
ISP
LEAPSWITCH NETW...
142.93.215.41
8/10
Confidence
100%
Reports
81
ISP
DigitalOcean, LLC
203.192.232.180
10/10
Confidence
100%
Reports
72
ISP
ONEOTT INTERTAI...
122.180.21.11
10/10
Confidence
100%
Reports
67
ISP
Bharti Airtel L...
111.93.186.150
10/10
Confidence
100%
Reports
67
ISP
Tata Teleservic...
45.123.110.70
10/10
Confidence
100%
Reports
66
ISP
WISH NET PRIVAT...
59.97.138.72
10/10
Confidence
100%
Reports
61
ISP
National Intern...
103.121.26.217
8/10
Confidence
100%
Reports
60
ISP
HIPOINT TECHNOL...
103.38.219.22
10/10
Confidence
100%
Reports
55
ISP
HEGHESCOM NETWO...
183.82.98.154
8/10
Confidence
100%
Reports
54
ISP
Atria Convergen...
112.196.0.228
8/10
Confidence
100%
Reports
51
ISP
Quadrant Televe...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
49%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
115.190.242.90
10/10
Confidence
49%
Reports
50
Location
CN
CN
23.92.26.33
10/10
Confidence
49%
Reports
37
Location
US
US
122.117.102.125
8/10
Confidence
49%
Reports
36
Location
TW
TW
45.141.215.111
10/10
Confidence
49%
Reports
36
Location
PL
PL
185.220.100.254
8/10
Confidence
49%
Reports
32
Location
DE
DE
62.21.184.57
5/10
Confidence
49%
Reports
29
Location
NL
NL
209.141.54.133
7/10
Confidence
49%
Reports
27
Location
US
US
180.93.230.246
10/10
Confidence
49%
Reports
18
Location
VN
VN
126.209.112.101
7/10
Confidence
49%
Reports
17
Location
PH
PH
122.52.141.103
7/10
Confidence
49%
Reports
17
Location
PH
PH
92.42.45.73
7/10
Confidence
49%
Reports
15
Location
DE
DE
181.57.198.116
10/10
Confidence
49%
Reports
15
Location
CO
CO
189.238.29.242
10/10
Confidence
49%
Reports
15
Location
MX
MX
185.220.100.247
8/10
Confidence
49%
Reports
14
Location
DE
DE
161.35.205.210
10/10
Confidence
49%
Reports
13
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203