Elevated Risk
Elevated threat level 8/10 for IP 121.139.39.185 from 36 reported incidents.
Behavioral profile indicates cyber threat activity with 96% confidence.
More threatening than 78% of monitored IPs
IP Address
121.139.39.185
IPv4
Public
KR
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Above Average Risk
KR
Location
Korea Telecom
ASN 4766
36
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
26. April 2026
Last Activity
25. May 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 4766) with generally good reputation. The ISP Korea Telecom maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
96%
Verified
Confidence History
9. Mar 2026 - 25. May 2026
96%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 121.139.39.185
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS4766
- ISP
- Korea Telecom
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 36
- First Reported
- 5 Feb 2026
- Last Reported
- 25 May 2026, 15:25
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4766
Korea Telecom
KR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
749
Total IPs Monitored
17,559
Total Reports
23.4
Reports per IP
Network Context
This IP address belongs to Korea Telecom (AS4766), which manages 749 IP addresses in our monitoring system. Out of these, 17,559 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 154,714 reported IPs worldwide
Threat Level
8/10
avg: 4.8
++
Total Reports
36
avg: 28
+
Network Comparison
Compared against 913 IPs in ASN 4766
Threat Level
8/10
network avg: 4.5
++
Total Reports
36
network avg: 19
++
Network Korea Telecom has overall threat level 2/10
Geographic Comparison
Compared against 2,025 IPs in KR
Threat Level
8/10
country avg: 4.9
++
Total Reports
36
country avg: 20
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Apr 2026
2 reports
Daily Average
0.3
reports/day
Most Active
Wednesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
36
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
145,993 threat incidents tracked globally • Last 24h: 18,632 Logs
FEED
Top Threat Sources
-
01
United States32,897 22.5% -
02
China23,542 16.1% -
03
India15,912 10.9% -
04
Brazil7,105 4.9% -
05
Germany6,162 4.2% -
06
Singapore5,771 4% -
07
Indonesia4,045 2.8% -
08
Netherlands3,780 2.6% -
09
Russia3,710 2.5% -
10
United Kingdom3,684 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
220.71.199.64
10/10
Confidence
100%
Reports
135
Location
KR
KR
118.47.200.96
10/10
Confidence
100%
Reports
71
Location
KR
KR
211.228.218.47
10/10
Confidence
100%
Reports
32
Location
KR
KR
121.168.139.251
10/10
Confidence
99%
Reports
130
Location
KR
KR
121.179.119.204
8/10
Confidence
99%
Reports
68
Location
KR
KR
220.119.37.141
10/10
Confidence
99%
Reports
49
Location
KR
KR
119.205.179.217
10/10
Confidence
99%
Reports
47
Location
KR
KR
175.198.62.180
10/10
Confidence
99%
Reports
32
Location
KR
KR
211.185.109.65
10/10
Confidence
99%
Reports
29
Location
KR
KR
222.107.156.227
10/10
Confidence
98%
Reports
108
Location
KR
KR
221.156.126.1
10/10
Confidence
98%
Reports
106
Location
KR
KR
121.141.219.98
10/10
Confidence
98%
Reports
66
Location
KR
KR
220.125.100.95
10/10
Confidence
98%
Reports
41
Location
KR
KR
211.251.245.88
10/10
Confidence
98%
Reports
34
Location
KR
KR
59.17.95.129
10/10
Confidence
98%
Reports
26
Location
KR
KR
222.101.66.189
10/10
Confidence
98%
Reports
12
Location
KR
KR
14.34.157.138
10/10
Confidence
97%
Reports
118
Location
KR
KR
61.72.55.130
10/10
Confidence
97%
Reports
109
Location
KR
KR
211.254.212.59
10/10
Confidence
97%
Reports
91
Location
KR
KR
220.87.134.89
10/10
Confidence
97%
Reports
48
Location
KR
KR
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
221.139.88.149
10/10
Confidence
100%
Reports
168
ISP
SK Broadband Co...
220.71.199.64
10/10
Confidence
100%
Reports
135
ISP
Korea Telecom
118.47.200.96
10/10
Confidence
100%
Reports
71
ISP
Korea Telecom
27.119.7.6
8/10
Confidence
100%
Reports
64
ISP
SK Broadband Co...
115.178.75.242
10/10
Confidence
100%
Reports
34
ISP
SK Broadband Co...
211.228.218.47
10/10
Confidence
100%
Reports
32
ISP
Korea Telecom
121.168.139.251
10/10
Confidence
99%
Reports
130
ISP
Korea Telecom
193.123.245.198
8/10
Confidence
99%
Reports
97
ISP
ORACLE-BMC-31898
58.229.141.26
10/10
Confidence
99%
Reports
79
ISP
SK Broadband Co...
121.179.119.204
8/10
Confidence
99%
Reports
68
ISP
Korea Telecom
1.222.42.237
10/10
Confidence
99%
Reports
67
ISP
LG DACOM Corpor...
175.118.127.138
10/10
Confidence
99%
Reports
59
ISP
SK Broadband Co...
220.119.37.141
10/10
Confidence
99%
Reports
49
ISP
Korea Telecom
119.205.179.217
10/10
Confidence
99%
Reports
47
ISP
Korea Telecom
112.217.199.222
10/10
Confidence
99%
Reports
42
ISP
LG DACOM Corpor...
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.58.56.214
8/10
Confidence
96%
Reports
2,336
Location
US
US
18.116.101.220
8/10
Confidence
96%
Reports
2,170
Location
US
US
18.218.118.203
8/10
Confidence
96%
Reports
1,949
Location
US
US
3.129.187.38
8/10
Confidence
96%
Reports
1,861
Location
US
US
3.130.168.2
8/10
Confidence
96%
Reports
1,647
Location
US
US
3.131.220.121
8/10
Confidence
96%
Reports
1,306
Location
US
US
3.132.26.232
8/10
Confidence
96%
Reports
939
Location
US
US
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
3.134.216.108
8/10
Confidence
96%
Reports
740
Location
US
US
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
193.32.162.35
10/10
Confidence
96%
Reports
628
Location
RO
RO
3.143.162.210
8/10
Confidence
96%
Reports
621
Location
US
US
106.75.188.200
10/10
Confidence
96%
Reports
603
Location
CN
CN
106.75.184.142
10/10
Confidence
96%
Reports
562
Location
CN
CN
106.75.156.189
10/10
Confidence
96%
Reports
551
Location
CN
CN