Critical Alert
Security alert: 14.103.123.232 rated 10/10 based on 16 verified incidents.
Threat profile indicates sustained malicious activity with 87% confidence rating.
More threatening than 96% of monitored IPs
IP Address
14.103.123.232
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
CN
Location
China Telecom Group
ASN 4811
16
Reports
Honeypot
Data Source
Threat Categories
Hacking
10
SSH
7
Exploited Host
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
28. May 2026
Last Activity
9. June 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 4811) with generally good reputation. The ISP China Telecom Group maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
83%
Verified
Confidence History
22. Feb 2026 - 9. Jun 2026
87%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 14.103.123.232
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS4811
- ISP
- China Telecom Group
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 16
- First Reported
- 22 Feb 2026
- Last Reported
- 9 Jun 2026, 07:27
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4811
China Telecom Group
CN
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
499
Total IPs Monitored
7,881
Total Reports
15.8
Reports per IP
Network Context
This IP address belongs to China Telecom Group (AS4811), which manages 499 IP addresses in our monitoring system. Out of these, 7,881 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 208,895 reported IPs worldwide
Threat Level
10/10
avg: 5.4
++
Total Reports
16
avg: 22
-
Network Comparison
Compared against 543 IPs in ASN 4811
Threat Level
10/10
network avg: 7.4
+
Total Reports
16
network avg: 16
=
Network China Telecom Group has overall threat level 2/10
Geographic Comparison
Compared against 26,700 IPs in CN
Threat Level
10/10
country avg: 3.8
++
Total Reports
16
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
28 May 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
6 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
10
SSH
7
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
195,866 threat incidents tracked globally • Last 24h: 17,225 Logs
FEED
Top Threat Sources
-
01
United States40,017 20.4% -
02
India31,255 16% -
03
China26,695 13.6%
-
04
Brazil10,639 5.4% -
05
Germany7,413 3.8% -
06
Singapore6,670 3.4% -
07
Indonesia5,827 3% -
08
Pakistan5,064 2.6% -
09
Russia5,000 2.6% -
10
Netherlands4,546 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
10/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
118.196.26.161
10/10
Confidence
100%
Reports
26
Location
CN
CN
14.103.118.120
10/10
Confidence
100%
Reports
26
Location
CN
CN
218.78.104.226
10/10
Confidence
100%
Reports
12
Location
CN
CN
14.103.123.16
10/10
Confidence
98%
Reports
24
Location
CN
CN
118.196.38.83
10/10
Confidence
98%
Reports
23
Location
CN
CN
14.103.105.246
10/10
Confidence
98%
Reports
21
Location
CN
CN
14.103.127.199
10/10
Confidence
98%
Reports
21
Location
CN
CN
14.103.117.142
10/10
Confidence
98%
Reports
20
Location
CN
CN
14.103.55.226
10/10
Confidence
98%
Reports
18
Location
CN
CN
118.196.114.236
10/10
Confidence
98%
Reports
17
Location
CN
CN
14.103.117.105
10/10
Confidence
98%
Reports
17
Location
CN
CN
14.103.127.80
10/10
Confidence
98%
Reports
16
Location
CN
CN
14.103.117.88
10/10
Confidence
98%
Reports
16
Location
CN
CN
14.103.117.97
10/10
Confidence
98%
Reports
16
Location
CN
CN
14.103.115.213
10/10
Confidence
98%
Reports
15
Location
CN
CN
14.103.112.103
10/10
Confidence
98%
Reports
15
Location
CN
CN
14.103.116.192
10/10
Confidence
98%
Reports
14
Location
CN
CN
14.103.127.231
10/10
Confidence
98%
Reports
13
Location
CN
CN
14.103.50.32
10/10
Confidence
98%
Reports
13
Location
CN
CN
218.78.59.30
10/10
Confidence
98%
Reports
12
Location
CN
CN
IPs from the same subnet range, likely same network segment.
16
Related IPs
9.6/10
Avg Threat
68%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
14.103.123.16
10/10
Confidence
98%
Reports
24
Location
CN
CN
14.103.123.19
10/10
Confidence
96%
Reports
11
Location
CN
CN
14.103.123.87
10/10
Confidence
82%
Reports
13
Location
CN
CN
14.103.123.50
10/10
Confidence
79%
Reports
12
Location
CN
CN
14.103.123.8
10/10
Confidence
77%
Reports
23
Location
CN
CN
14.103.123.167
10/10
Confidence
75%
Reports
11
Location
CN
CN
14.103.123.6
10/10
Confidence
71%
Reports
9
Location
CN
CN
14.103.123.75
10/10
Confidence
69%
Reports
8
Location
CN
CN
14.103.123.80
10/10
Confidence
68%
Reports
7
Location
CN
CN
14.103.123.73
10/10
Confidence
65%
Reports
9
Location
CN
CN
14.103.123.65
10/10
Confidence
65%
Reports
6
Location
CN
CN
14.103.123.67
10/10
Confidence
63%
Reports
367
Location
CN
CN
14.103.123.166
8/10
Confidence
59%
Reports
8
Location
CN
CN
14.103.123.206
10/10
Confidence
56%
Reports
5
Location
CN
CN
14.103.123.169
8/10
Confidence
49%
Reports
9
Location
CN
CN
14.103.123.234
7/10
Confidence
17%
Reports
1
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
10/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
112.11.230.160
10/10
Confidence
100%
Reports
107
ISP
China Mobile co...
110.82.42.202
10/10
Confidence
100%
Reports
103
ISP
Chinanet
110.191.179.174
10/10
Confidence
100%
Reports
103
ISP
Chinanet
111.23.144.224
10/10
Confidence
100%
Reports
86
ISP
China Mobile co...
111.22.70.208
10/10
Confidence
100%
Reports
80
ISP
China Mobile co...
112.27.109.94
10/10
Confidence
100%
Reports
80
ISP
China Mobile Co...
218.17.239.204
10/10
Confidence
100%
Reports
70
ISP
Chinanet
220.180.76.50
10/10
Confidence
100%
Reports
66
ISP
Chinanet
218.92.102.178
10/10
Confidence
100%
Reports
62
ISP
Chinanet
27.18.114.8
10/10
Confidence
100%
Reports
61
ISP
Chinanet
111.160.139.4
10/10
Confidence
100%
Reports
59
ISP
CHINA UNICOM Ch...
112.91.253.202
10/10
Confidence
100%
Reports
47
ISP
China Unicom IP...
180.164.45.181
10/10
Confidence
100%
Reports
44
ISP
China Telecom G...
14.29.214.161
10/10
Confidence
100%
Reports
43
ISP
Chinanet
112.4.79.138
10/10
Confidence
100%
Reports
31
ISP
China Mobile co...
IPs with similar threat level and confidence scores.
15
Related IPs
7.9/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
146.190.153.30
8/10
Confidence
87%
Reports
7,021
Location
US
US
24.199.126.56
8/10
Confidence
87%
Reports
6,974
Location
US
US
209.38.70.156
8/10
Confidence
87%
Reports
6,907
Location
US
US
178.128.32.203
8/10
Confidence
87%
Reports
4,816
Location
GB
GB
64.89.160.82
8/10
Confidence
87%
Reports
1,099
Location
GB
GB
81.29.142.100
8/10
Confidence
87%
Reports
978
Location
RU
RU
62.60.130.169
7/10
Confidence
87%
Reports
774
Location
IR
IR
81.168.83.103
8/10
Confidence
87%
Reports
723
Location
GB
GB
65.49.20.66
8/10
Confidence
87%
Reports
664
Location
US
US
207.90.244.17
8/10
Confidence
87%
Reports
661
Location
US
US
92.63.197.78
7/10
Confidence
87%
Reports
660
Location
UA
UA
167.94.146.51
10/10
Confidence
87%
Reports
658
Location
US
US
178.16.54.141
7/10
Confidence
87%
Reports
578
Location
NL
NL
65.49.1.122
8/10
Confidence
87%
Reports
576
Location
US
US
167.94.146.53
8/10
Confidence
87%
Reports
557
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 51.68.207.118
- 176.65.149.64
- 193.32.162.28
- 80.94.92.183
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203