Substantial Risk
Threat level 8/10 for 2.133.48.79 based on 7 documented incidents.
Consistent suspicious behavior patterns. 61% confidence rating.
More threatening than 81% of monitored IPs
IP Address
2.133.48.79
IPv4
Public
KZ
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Kazakhstan
Location
JSC Kazakhtelecom
ASN 9198
7
Reports
Mixed
Data Source
Threat Categories
Brute-Force
4
WP Login Brute Force
4
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 days indicates persistent threat actor operations.
First Observed
14. July 2026
Last Activity
18. July 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 9198, operated by JSC Kazakhtelecom) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
50%
Medium Confidence
Confidence History
15. Jun 2026 - 18. Jul 2026
61%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 2.133.48.79
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KZ
- ASN
- AS9198
- ISP
- JSC Kazakhtelecom
DNS Information
- Reverse DNS
- 2.133.48.79.dynamic.telecom.kz
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 7
- First Reported
- 15 Jun 2026
- Last Reported
- 18 Jul 2026, 20:25
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9198
JSC Kazakhtelecom
KZ
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
139
Total IPs Monitored
636
Total Reports
4.6
Reports per IP
Network Context
This IP address belongs to JSC Kazakhtelecom (AS9198), which manages 139 IP addresses in our monitoring system. Out of these, 636 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 292,789 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
7
avg: 18
--
Network Comparison
Compared against 190 IPs in ASN 9198
Threat Level
8/10
network avg: 5.4
+
Total Reports
7
network avg: 4
++
Network JSC Kazakhtelecom has overall threat level 4/10
Geographic Comparison
Compared against 469 IPs in KZ
Threat Level
8/10
country avg: 5.8
+
Total Reports
7
country avg: 9
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Jul 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Monday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
WP Login Brute Force
4
Brute-Force
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 17:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
274,683 threat incidents tracked globally • Last 24h: 15,590 Logs
FEED
Top Threat Sources
-
01
United States61,823 22.5% -
02
India45,429 16.5% -
03
China34,151 12.4% -
04
Brazil14,711 5.4% -
05
Germany9,864 3.6% -
06
Singapore7,957 2.9% -
07
Indonesia7,873 2.9% -
08
Pakistan7,800 2.8% -
09
Russia6,181 2.3% -
10
Netherlands5,923 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.8/10
Avg Threat
70%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
2.134.15.12
10/10
Confidence
100%
Reports
21
Location
KZ
KZ
92.47.46.174
8/10
Confidence
100%
Reports
18
Location
KZ
KZ
92.46.38.226
10/10
Confidence
97%
Reports
20
Location
KZ
KZ
5.251.10.135
10/10
Confidence
94%
Reports
31
Location
KZ
KZ
89.218.69.66
10/10
Confidence
90%
Reports
115
Location
KZ
KZ
95.58.255.251
10/10
Confidence
86%
Reports
94
Location
KZ
KZ
2.133.129.138
10/10
Confidence
69%
Reports
13
Location
KZ
KZ
2.135.147.138
8/10
Confidence
65%
Reports
7
Location
KZ
KZ
37.151.93.234
10/10
Confidence
63%
Reports
43
Location
KZ
KZ
95.59.185.65
10/10
Confidence
63%
Reports
17
Location
KZ
KZ
5.63.111.238
10/10
Confidence
62%
Reports
11
Location
KZ
KZ
88.204.141.90
10/10
Confidence
62%
Reports
5
Location
KZ
KZ
92.46.38.225
10/10
Confidence
62%
Reports
5
Location
KZ
KZ
92.47.131.105
10/10
Confidence
57%
Reports
11
Location
KZ
KZ
37.150.43.192
10/10
Confidence
57%
Reports
5
Location
KZ
KZ
95.57.63.23
10/10
Confidence
56%
Reports
11
Location
KZ
KZ
82.200.235.138
10/10
Confidence
56%
Reports
4
Location
KZ
KZ
89.218.147.90
10/10
Confidence
55%
Reports
5
Location
KZ
KZ
178.89.125.139
10/10
Confidence
54%
Reports
10
Location
KZ
KZ
82.200.178.70
10/10
Confidence
54%
Reports
7
Location
KZ
KZ
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
2.134.15.12
10/10
Confidence
100%
Reports
21
ISP
JSC Kazakhtelecom
92.47.46.174
8/10
Confidence
100%
Reports
18
ISP
JSC Kazakhtelecom
176.124.88.29
10/10
Confidence
98%
Reports
32
ISP
Kar-Tel LLC
91.147.92.31
8/10
Confidence
97%
Reports
44
ISP
PS Internet Com...
213.166.81.185
8/10
Confidence
97%
Reports
28
ISP
TOO Internet Re...
92.46.38.226
10/10
Confidence
97%
Reports
20
ISP
JSC Kazakhtelecom
45.66.52.41
8/10
Confidence
97%
Reports
12
ISP
NLS Kazakhstan LLC
89.107.99.224
10/10
Confidence
96%
Reports
130
ISP
BTcom Infocommu...
5.35.107.110
10/10
Confidence
94%
Reports
78
ISP
Cloud Services ...
5.251.10.135
10/10
Confidence
94%
Reports
31
ISP
JSC Kazakhtelecom
139.45.211.20
10/10
Confidence
94%
Reports
20
ISP
RETN KZ Ltd
45.159.86.38
10/10
Confidence
94%
Reports
15
ISP
Eurasia-Star LLP
46.247.41.113
10/10
Confidence
94%
Reports
14
ISP
PS Internet Com...
185.136.15.80
10/10
Confidence
94%
Reports
14
ISP
Vlad Cojuhari
185.136.15.110
8/10
Confidence
91%
Reports
281
ISP
Vlad Cojuhari
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
61%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
80.94.95.15
10/10
Confidence
61%
Reports
29,208
Location
RO
RO
3.131.215.38
8/10
Confidence
61%
Reports
15,106
Location
US
US
92.118.39.87
10/10
Confidence
61%
Reports
14,713
Location
US
US
193.142.147.209
10/10
Confidence
61%
Reports
11,438
Location
DE
DE
196.251.84.225
10/10
Confidence
61%
Reports
10,123
Location
NL
NL
47.74.52.128
10/10
Confidence
61%
Reports
3,651
Location
JP
JP
80.94.92.40
10/10
Confidence
61%
Reports
3,501
Location
RO
RO
185.243.5.23
10/10
Confidence
61%
Reports
3,266
Location
HK
HK
117.181.194.65
10/10
Confidence
61%
Reports
3,169
Location
CN
CN
80.94.95.112
10/10
Confidence
61%
Reports
3,047
Location
RO
RO
185.243.5.36
10/10
Confidence
61%
Reports
2,015
Location
HK
HK
78.153.140.179
10/10
Confidence
61%
Reports
1,957
Location
GB
GB
188.166.17.103
10/10
Confidence
61%
Reports
1,937
Location
NL
NL
213.209.143.48
10/10
Confidence
61%
Reports
1,648
Location
DE
DE
185.191.127.110
8/10
Confidence
61%
Reports
1,624
Location
NL
NL
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13