Critical Alert
Security alert: 14.63.196.175 rated 10/10 based on 301 verified incidents.
Threat profile indicates sustained malicious activity with 85% confidence rating.
More threatening than 95% of monitored IPs
IP Address
14.63.196.175
IPv4
Public
KR
Threat Intelligence Analysis
AI-generated security assessment based on aggregated threat data
Top 5% Most Dangerous
KR
Location
Korea Telecom
ASN 4766
301
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
14
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
4. May 2026
Last Activity
21. May 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 4766) with generally good reputation. The ISP Korea Telecom maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
4/10
Low
Confidence Score
84%
Verified
Confidence History
15. Apr 2026 - 21. May 2026
85%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 14.63.196.175
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KR
- ASN
- AS4766
- ISP
- Korea Telecom
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 301
- First Reported
- 29 Nov 2025
- Last Reported
- 21 May 2026, 19:40
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS4766
Korea Telecom
KR
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
749
Total IPs Monitored
17,559
Total Reports
23.4
Reports per IP
Network Context
This IP address belongs to Korea Telecom (AS4766), which manages 749 IP addresses in our monitoring system. Out of these, 17,559 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
✅ Network Status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
95
%
Global Threat Ranking
This IP is more threatening than 95% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 153,882 reported IPs worldwide
Threat Level
10/10
avg: 4.8
++
Total Reports
301
avg: 28
++
Network Comparison
Compared against 913 IPs in ASN 4766
Threat Level
10/10
network avg: 4.5
++
Total Reports
301
network avg: 19
++
Network Korea Telecom has overall threat level 2/10
Geographic Comparison
Compared against 2,025 IPs in KR
Threat Level
10/10
country avg: 4.9
++
Total Reports
301
country avg: 20
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
4 May 2026
9 reports
Daily Average
0.6
reports/day
Most Active
Saturday
157 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
193
Hacking
142
Exploited Host
11
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 29 reports
Weekly Activity
Geographic Threat Distribution
145,363 threat incidents tracked globally • Last 24h: 19,391 Logs
FEED
Top Threat Sources
-
01
United States32,793 22.6% -
02
China23,511 16.2% -
03
India15,734 10.8% -
04
Brazil7,030 4.8% -
05
Germany6,143 4.2% -
06
Singapore5,764 4% -
07
Indonesia4,031 2.8% -
08
Netherlands3,758 2.6% -
09
Russia3,704 2.5% -
10
United Kingdom3,678 2.5%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
98%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
220.71.199.64
10/10
Confidence
100%
Reports
135
Location
KR
KR
118.47.200.96
10/10
Confidence
100%
Reports
71
Location
KR
KR
211.228.218.47
10/10
Confidence
100%
Reports
32
Location
KR
KR
121.168.139.251
10/10
Confidence
99%
Reports
130
Location
KR
KR
121.179.119.204
8/10
Confidence
99%
Reports
68
Location
KR
KR
220.119.37.141
10/10
Confidence
99%
Reports
49
Location
KR
KR
119.205.179.217
10/10
Confidence
99%
Reports
47
Location
KR
KR
175.198.62.180
10/10
Confidence
99%
Reports
32
Location
KR
KR
211.185.109.65
10/10
Confidence
99%
Reports
29
Location
KR
KR
222.107.156.227
10/10
Confidence
98%
Reports
108
Location
KR
KR
221.156.126.1
10/10
Confidence
98%
Reports
106
Location
KR
KR
121.141.219.98
10/10
Confidence
98%
Reports
66
Location
KR
KR
220.125.100.95
10/10
Confidence
98%
Reports
41
Location
KR
KR
211.251.245.88
10/10
Confidence
98%
Reports
34
Location
KR
KR
59.17.95.129
10/10
Confidence
98%
Reports
26
Location
KR
KR
222.101.66.189
10/10
Confidence
98%
Reports
12
Location
KR
KR
14.34.157.138
10/10
Confidence
97%
Reports
118
Location
KR
KR
61.72.55.130
10/10
Confidence
97%
Reports
109
Location
KR
KR
211.254.212.59
10/10
Confidence
97%
Reports
91
Location
KR
KR
220.87.134.89
10/10
Confidence
97%
Reports
48
Location
KR
KR
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
221.139.88.149
10/10
Confidence
100%
Reports
168
ISP
SK Broadband Co...
220.71.199.64
10/10
Confidence
100%
Reports
135
ISP
Korea Telecom
118.47.200.96
10/10
Confidence
100%
Reports
71
ISP
Korea Telecom
27.119.7.6
8/10
Confidence
100%
Reports
64
ISP
SK Broadband Co...
115.178.75.242
10/10
Confidence
100%
Reports
34
ISP
SK Broadband Co...
211.228.218.47
10/10
Confidence
100%
Reports
32
ISP
Korea Telecom
121.168.139.251
10/10
Confidence
99%
Reports
130
ISP
Korea Telecom
193.123.245.198
8/10
Confidence
99%
Reports
97
ISP
ORACLE-BMC-31898
58.229.141.26
10/10
Confidence
99%
Reports
79
ISP
SK Broadband Co...
121.179.119.204
8/10
Confidence
99%
Reports
68
ISP
Korea Telecom
1.222.42.237
10/10
Confidence
99%
Reports
67
ISP
LG DACOM Corpor...
175.118.127.138
10/10
Confidence
99%
Reports
59
ISP
SK Broadband Co...
220.119.37.141
10/10
Confidence
99%
Reports
49
ISP
Korea Telecom
119.205.179.217
10/10
Confidence
99%
Reports
47
ISP
Korea Telecom
112.217.199.222
10/10
Confidence
99%
Reports
42
ISP
LG DACOM Corpor...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
85%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
147.182.202.179
8/10
Confidence
85%
Reports
6,989
Location
US
US
137.184.190.246
8/10
Confidence
85%
Reports
1,798
Location
US
US
65.49.1.172
8/10
Confidence
85%
Reports
550
Location
US
US
64.62.156.202
8/10
Confidence
85%
Reports
546
Location
US
US
167.94.146.60
8/10
Confidence
85%
Reports
514
Location
US
US
167.94.146.49
8/10
Confidence
85%
Reports
513
Location
US
US
65.49.1.142
10/10
Confidence
85%
Reports
497
Location
US
US
64.62.156.94
10/10
Confidence
85%
Reports
487
Location
US
US
64.62.156.38
8/10
Confidence
85%
Reports
467
Location
US
US
14.18.190.138
10/10
Confidence
85%
Reports
427
Location
CN
CN
20.58.146.18
10/10
Confidence
85%
Reports
407
Location
AU
AU
5.182.83.231
10/10
Confidence
85%
Reports
314
Location
ES
ES
195.178.110.199
8/10
Confidence
85%
Reports
292
Location
BG
BG
80.94.92.171
10/10
Confidence
85%
Reports
279
Location
RO
RO
202.165.15.132
10/10
Confidence
85%
Reports
242
Location
MY
MY