Critical Alert
Security alert: 121.52.147.5 rated 10/10 based on 73 verified incidents.
Threat profile indicates sustained malicious activity with 88% confidence rating.
More threatening than 96% of monitored IPs
IP Address
121.52.147.5
IPv4
Public
PK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
PK
Location
PERN AS Content Servie Pr...
ASN 45773
73
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
8
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
25. May 2026
Last Activity
8. June 2026
Recent (7 days)
4 incidents
Reputable Network
This IP is hosted on a network (ASN 45773) with generally good reputation. The ISP PERN AS Content Servie Provider, Islamabad, Pakistan maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
88%
Verified
Confidence History
8. Mar 2026 - 8. Jun 2026
88%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH | Honeypot | 75% |
| New | SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 121.52.147.5
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
PK
- ASN
- AS45773
- ISP
- PERN AS Content Servie Provider, Islamabad, Pakistan
DNS Information
- Reverse DNS
- upesh.edu.pk
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 73
- First Reported
- 20 Feb 2026
- Last Reported
- 8 Jun 2026, 20:22
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS45773
PERN AS Content Servie Provider, Islamabad, Pakistan
PK
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
20
Total IPs Monitored
719
Total Reports
36
Reports per IP
Network Context
This IP address belongs to PERN AS Content Servie Provider, Islamabad, Pakistan (AS45773), which manages 20 IP addresses in our monitoring system. Out of these, 719 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 200,047 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
73
avg: 23
++
Network Comparison
Compared against 37 IPs in ASN 45773
Threat Level
10/10
network avg: 6.2
++
Total Reports
73
network avg: 21
++
Network PERN AS Content Servie Provider, Islamabad, Pakistan has overall threat level 2/10
Geographic Comparison
Compared against 4,710 IPs in PK
Threat Level
10/10
country avg: 5.4
++
Total Reports
73
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
29 May 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Saturday
19 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
71
Hacking
8
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 10 reports
Weekly Activity
Geographic Threat Distribution
187,719 threat incidents tracked globally • Last 24h: 18,896 Logs
FEED
Top Threat Sources
-
01
United States38,493 20.5% -
02
India29,262 15.6% -
03
China26,047 13.9% -
04
Brazil10,264 5.5% -
05
Germany7,151 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,560 3% -
08
Russia4,712 2.5% -
09
Pakistan4,710 2.5%
-
10
Netherlands4,363 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.8/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
111.68.107.91
10/10
Confidence
96%
Reports
11
Location
PK
PK
111.68.98.152
10/10
Confidence
91%
Reports
91
Location
PK
PK
165.101.126.96
10/10
Confidence
90%
Reports
115
Location
PK
PK
111.68.97.251
8/10
Confidence
78%
Reports
16
Location
PK
PK
103.4.92.103
8/10
Confidence
72%
Reports
61
Location
PK
PK
111.68.106.105
10/10
Confidence
68%
Reports
8
Location
PK
PK
121.52.154.238
10/10
Confidence
65%
Reports
305
Location
PK
PK
111.68.103.14
10/10
Confidence
60%
Reports
37
Location
PK
PK
121.52.144.251
10/10
Confidence
58%
Reports
10
Location
PK
PK
111.68.99.9
8/10
Confidence
52%
Reports
3
Location
PK
PK
121.52.153.7
10/10
Confidence
47%
Reports
4
Location
PK
PK
111.68.96.34
0/10
Confidence
45%
Reports
3
Location
PK
PK
111.68.109.252
0/10
Confidence
42%
Reports
3
Location
PK
PK
121.52.150.220
7/10
Confidence
40%
Reports
2
Location
PK
PK
111.68.102.19
7/10
Confidence
36%
Reports
4
Location
PK
PK
121.52.158.248
7/10
Confidence
35%
Reports
4
Location
PK
PK
121.52.150.221
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.96.22
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.111.70
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.110.252
10/10
Confidence
34%
Reports
4
Location
PK
PK
IPs from the same subnet range, likely same network segment.
1
Related IPs
6/10
Avg Threat
23%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
154.57.216.142
10/10
Confidence
99%
Reports
53
ISP
Trans World Ent...
124.29.207.189
8/10
Confidence
99%
Reports
38
ISP
Cyber Internet ...
72.255.9.39
8/10
Confidence
99%
Reports
22
ISP
Cyber Internet ...
103.164.9.74
10/10
Confidence
98%
Reports
45
ISP
KHAZANA ENTERPR...
154.57.193.173
8/10
Confidence
98%
Reports
22
ISP
Trans World Ent...
103.138.51.150
10/10
Confidence
97%
Reports
17
ISP
CITS PVT LTD
103.166.103.173
10/10
Confidence
97%
Reports
15
ISP
Grand Tel Priva...
203.128.24.180
8/10
Confidence
96%
Reports
24
ISP
S. B Link Network
111.68.107.91
10/10
Confidence
96%
Reports
11
ISP
PERN AS Content...
43.228.157.16
10/10
Confidence
94%
Reports
57
ISP
M247 Europe SRL
43.228.157.15
10/10
Confidence
94%
Reports
57
ISP
M247 Europe SRL
182.191.77.164
10/10
Confidence
94%
Reports
56
ISP
Pakistan Teleco...
43.228.157.191
10/10
Confidence
94%
Reports
54
ISP
Ghosty Networks...
43.228.157.12
10/10
Confidence
94%
Reports
54
ISP
M247 Europe SRL
43.228.157.21
10/10
Confidence
94%
Reports
52
ISP
M247 Europe SRL
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
80.94.92.183
10/10
Confidence
88%
Reports
5,389
Location
RO
RO
176.65.149.64
10/10
Confidence
88%
Reports
5,359
Location
NL
NL
178.128.32.203
8/10
Confidence
88%
Reports
4,661
Location
GB
GB
79.124.59.78
10/10
Confidence
88%
Reports
3,376
Location
BG
BG
204.76.203.73
10/10
Confidence
88%
Reports
1,724
Location
NL
NL
80.94.95.169
8/10
Confidence
88%
Reports
1,001
Location
RO
RO
106.75.137.178
10/10
Confidence
88%
Reports
973
Location
CN
CN
185.242.3.100
7/10
Confidence
88%
Reports
791
Location
NL
NL
207.90.244.17
8/10
Confidence
88%
Reports
642
Location
US
US
65.49.20.69
8/10
Confidence
88%
Reports
572
Location
US
US
64.62.156.108
8/10
Confidence
88%
Reports
539
Location
US
US
93.174.93.12
8/10
Confidence
88%
Reports
506
Location
NL
NL
167.94.146.56
8/10
Confidence
88%
Reports
505
Location
US
US
167.94.146.62
10/10
Confidence
88%
Reports
503
Location
US
US
64.62.197.167
8/10
Confidence
88%
Reports
497
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203