Critical Alert
Security alert: 111.68.98.152 rated 10/10 based on 91 verified incidents.
Threat profile indicates sustained malicious activity with 91% confidence rating.
More threatening than 97% of monitored IPs
IP Address
111.68.98.152
IPv4
Public
PK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
PK
Location
PERN AS Content Servie Pr...
ASN 45773
91
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Hacking
3
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
8. June 2026
Recent (7 days)
7 incidents
Reputable Network
This IP is hosted on a network (ASN 45773) with generally good reputation. The ISP PERN AS Content Servie Provider, Islamabad, Pakistan maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
91%
Verified
Confidence History
6. Apr 2026 - 8. Jun 2026
91%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host Hacking SSH | Honeypot x3 | 75% |
| New | SSH Hacking | Honeypot x2 | 75% |
| New | Hacking SSH Exploited Host | Honeypot x3 | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 111.68.98.152
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
PK
- ASN
- AS45773
- ISP
- PERN AS Content Servie Provider, Islamabad, Pakistan
DNS Information
- Reverse DNS
- 111.68.98.152.pern.pk
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 91
- First Reported
- 19 Feb 2026
- Last Reported
- 8 Jun 2026, 19:05
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS45773
PERN AS Content Servie Provider, Islamabad, Pakistan
PK
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
20
Total IPs Monitored
719
Total Reports
36
Reports per IP
Network Context
This IP address belongs to PERN AS Content Servie Provider, Islamabad, Pakistan (AS45773), which manages 20 IP addresses in our monitoring system. Out of these, 719 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,821 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
91
avg: 23
++
Network Comparison
Compared against 36 IPs in ASN 45773
Threat Level
10/10
network avg: 6.2
++
Total Reports
91
network avg: 22
++
Network PERN AS Content Servie Provider, Islamabad, Pakistan has overall threat level 2/10
Geographic Comparison
Compared against 4,689 IPs in PK
Threat Level
10/10
country avg: 5.4
++
Total Reports
91
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Jun 2026
4 reports
Daily Average
0.6
reports/day
Most Active
Thursday
20 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
91
Hacking
7
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 11:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
187,517 threat incidents tracked globally • Last 24h: 19,025 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,035 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,146 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5%
-
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.8/10
Avg Threat
55%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
111.68.107.91
10/10
Confidence
96%
Reports
11
Location
PK
PK
165.101.126.96
10/10
Confidence
90%
Reports
115
Location
PK
PK
121.52.147.5
10/10
Confidence
88%
Reports
73
Location
PK
PK
111.68.97.251
8/10
Confidence
78%
Reports
16
Location
PK
PK
103.4.92.103
8/10
Confidence
72%
Reports
61
Location
PK
PK
111.68.106.105
10/10
Confidence
68%
Reports
8
Location
PK
PK
121.52.154.238
10/10
Confidence
65%
Reports
305
Location
PK
PK
111.68.103.14
10/10
Confidence
60%
Reports
37
Location
PK
PK
121.52.144.251
10/10
Confidence
58%
Reports
10
Location
PK
PK
111.68.99.9
8/10
Confidence
52%
Reports
3
Location
PK
PK
111.68.96.34
0/10
Confidence
45%
Reports
3
Location
PK
PK
111.68.109.252
0/10
Confidence
42%
Reports
3
Location
PK
PK
121.52.153.7
10/10
Confidence
40%
Reports
3
Location
PK
PK
121.52.150.220
7/10
Confidence
40%
Reports
2
Location
PK
PK
111.68.102.19
7/10
Confidence
36%
Reports
4
Location
PK
PK
121.52.158.248
7/10
Confidence
35%
Reports
4
Location
PK
PK
121.52.150.221
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.96.22
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.111.70
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.110.252
10/10
Confidence
34%
Reports
4
Location
PK
PK
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
154.57.216.142
10/10
Confidence
99%
Reports
53
ISP
Trans World Ent...
124.29.207.189
8/10
Confidence
99%
Reports
38
ISP
Cyber Internet ...
72.255.9.39
8/10
Confidence
99%
Reports
22
ISP
Cyber Internet ...
103.164.9.74
10/10
Confidence
98%
Reports
45
ISP
KHAZANA ENTERPR...
154.57.193.173
8/10
Confidence
98%
Reports
22
ISP
Trans World Ent...
103.138.51.150
10/10
Confidence
97%
Reports
17
ISP
CITS PVT LTD
103.166.103.173
10/10
Confidence
97%
Reports
15
ISP
Grand Tel Priva...
203.128.24.180
8/10
Confidence
96%
Reports
24
ISP
S. B Link Network
111.68.107.91
10/10
Confidence
96%
Reports
11
ISP
PERN AS Content...
43.228.157.16
10/10
Confidence
94%
Reports
57
ISP
M247 Europe SRL
43.228.157.15
10/10
Confidence
94%
Reports
57
ISP
M247 Europe SRL
182.191.77.164
10/10
Confidence
94%
Reports
56
ISP
Pakistan Teleco...
43.228.157.191
10/10
Confidence
94%
Reports
54
ISP
Ghosty Networks...
43.228.157.12
10/10
Confidence
94%
Reports
54
ISP
M247 Europe SRL
43.228.157.21
10/10
Confidence
94%
Reports
52
ISP
M247 Europe SRL
IPs with similar threat level and confidence scores.
15
Related IPs
8.4/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
172.110.223.33
8/10
Confidence
91%
Reports
6,499
Location
HK
HK
94.154.35.215
10/10
Confidence
91%
Reports
5,705
Location
NL
NL
176.65.149.224
10/10
Confidence
91%
Reports
4,969
Location
NL
NL
176.65.149.67
10/10
Confidence
91%
Reports
4,067
Location
NL
NL
176.65.149.30
10/10
Confidence
91%
Reports
3,894
Location
NL
NL
194.50.16.198
8/10
Confidence
91%
Reports
2,443
Location
NL
NL
91.92.243.76
8/10
Confidence
91%
Reports
1,774
Location
US
US
185.218.138.11
7/10
Confidence
91%
Reports
1,524
Location
US
US
185.218.138.14
7/10
Confidence
91%
Reports
1,456
Location
US
US
137.184.112.192
8/10
Confidence
91%
Reports
1,419
Location
US
US
185.218.138.13
8/10
Confidence
91%
Reports
1,388
Location
US
US
88.210.63.3
8/10
Confidence
91%
Reports
1,379
Location
UA
UA
92.63.197.80
8/10
Confidence
91%
Reports
1,352
Location
UA
UA
92.63.197.79
8/10
Confidence
91%
Reports
1,334
Location
UA
UA
88.210.63.5
8/10
Confidence
91%
Reports
1,310
Location
UA
UA
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203