High Risk
IP 119.96.99.124 rated at threat level 8/10 based on 18 security reports.
Pattern analysis reveals concerning activity. Confidence: 68%.
More threatening than 79% of monitored IPs
IP Address
119.96.99.124
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CN
Location
CHINANET Hubei province n...
ASN 58563
18
Reports
Honeypot
Data Source
Threat Categories
SSH
18
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 58563) with generally good reputation. The ISP CHINANET Hubei province network maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
64%
High Confidence
Confidence History
23. Feb 2026 - 9. Mar 2026
68%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 119.96.99.124
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS58563
- ISP
- CHINANET Hubei province network
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 23 Feb 2026
- Last Reported
- 9 Mar 2026, 09:01
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS58563
CHINANET Hubei province network
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
22
Total IPs Monitored
2,347
Total Reports
106.7
Reports per IP
Network Context
This IP address belongs to CHINANET Hubei province network (AS58563), which manages 22 IP addresses in our monitoring system. Out of these, 2,347 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,474 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
18
avg: 23
-
Network Comparison
Compared against 25 IPs in ASN 58563
Threat Level
8/10
network avg: 7.9
=
Total Reports
18
network avg: 96
--
Network CHINANET Hubei province network has overall threat level 2/10
Geographic Comparison
Compared against 26,021 IPs in CN
Threat Level
8/10
country avg: 3.7
++
Total Reports
18
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Tuesday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
18
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9%
-
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.4/10
Avg Threat
70%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
119.96.242.82
10/10
Confidence
100%
Reports
12
Location
CN
CN
119.96.193.72
10/10
Confidence
99%
Reports
17
Location
CN
CN
119.96.131.105
8/10
Confidence
98%
Reports
160
Location
CN
CN
119.96.173.169
10/10
Confidence
97%
Reports
35
Location
CN
CN
119.96.81.99
10/10
Confidence
96%
Reports
11
Location
CN
CN
119.96.131.8
10/10
Confidence
85%
Reports
56
Location
CN
CN
119.96.55.122
10/10
Confidence
81%
Reports
36
Location
CN
CN
119.96.191.166
10/10
Confidence
73%
Reports
13
Location
CN
CN
119.96.158.238
8/10
Confidence
71%
Reports
11
Location
CN
CN
119.96.173.30
8/10
Confidence
68%
Reports
19
Location
CN
CN
119.96.159.237
10/10
Confidence
67%
Reports
1,904
Location
CN
CN
119.96.146.137
10/10
Confidence
61%
Reports
26
Location
CN
CN
119.96.83.68
10/10
Confidence
61%
Reports
26
Location
CN
CN
119.96.24.54
10/10
Confidence
59%
Reports
9
Location
CN
CN
119.96.158.87
8/10
Confidence
54%
Reports
10
Location
CN
CN
119.96.157.188
8/10
Confidence
48%
Reports
8
Location
CN
CN
116.211.118.66
10/10
Confidence
48%
Reports
6
Location
CN
CN
119.96.174.235
8/10
Confidence
47%
Reports
5
Location
CN
CN
116.211.105.14
0/10
Confidence
47%
Reports
3
Location
CN
CN
119.96.224.54
0/10
Confidence
45%
Reports
2
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
117.157.77.71
10/10
Confidence
100%
Reports
113
ISP
China Mobile Co...
112.11.230.160
10/10
Confidence
100%
Reports
104
ISP
China Mobile co...
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.82.42.202
10/10
Confidence
100%
Reports
102
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
77
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
76
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
67
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
65
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
218.90.157.62
10/10
Confidence
100%
Reports
59
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
218.92.102.178
10/10
Confidence
100%
Reports
59
ISP
Chinanet
112.91.253.202
10/10
Confidence
100%
Reports
46
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
43
ISP
China Telecom G...
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
68%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
159.69.99.156
10/10
Confidence
68%
Reports
4,561
Location
DE
DE
66.132.153.60
10/10
Confidence
68%
Reports
1,351
Location
US
US
66.132.153.61
10/10
Confidence
68%
Reports
1,298
Location
US
US
66.132.153.63
10/10
Confidence
68%
Reports
1,290
Location
US
US
66.132.153.57
10/10
Confidence
68%
Reports
1,228
Location
US
US
66.132.153.52
10/10
Confidence
68%
Reports
1,173
Location
US
US
194.165.16.11
10/10
Confidence
68%
Reports
981
Location
MC
MC
91.92.242.109
10/10
Confidence
68%
Reports
876
Location
NL
NL
77.83.39.156
7/10
Confidence
68%
Reports
718
Location
UA
UA
164.92.205.72
10/10
Confidence
68%
Reports
494
Location
DE
DE
204.76.203.192
10/10
Confidence
68%
Reports
458
Location
NL
NL
178.62.53.116
10/10
Confidence
68%
Reports
450
Location
GB
GB
142.93.141.251
10/10
Confidence
68%
Reports
386
Location
NL
NL
62.60.130.65
7/10
Confidence
68%
Reports
346
Location
IR
IR
45.183.247.34
8/10
Confidence
68%
Reports
323
Location
CO
CO
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203