Critical Alert
Security alert: 154.91.170.15 rated 10/10 based on 52 verified incidents.
Threat profile indicates sustained malicious activity with 74% confidence rating.
More threatening than 93% of monitored IPs
IP Address
154.91.170.15
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
SC
Location
BitCommand LLC
ASN 212552
52
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
2
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 212552) with generally good reputation. The ISP BitCommand LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
70%
High Confidence
Confidence History
26. Feb 2026 - 7. Mar 2026
74%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 154.91.170.15
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SC
- ASN
- AS212552
- ISP
- BitCommand LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 52
- First Reported
- 20 Feb 2026
- Last Reported
- 7 Mar 2026, 03:00
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS212552
BitCommand LLC
NL
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
16
Total IPs Monitored
267
Total Reports
16.7
Reports per IP
Network Context
This IP address belongs to BitCommand LLC (AS212552), which manages 16 IP addresses in our monitoring system. Out of these, 267 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,716 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
52
avg: 23
++
Network Comparison
Compared against 31 IPs in ASN 212552
Threat Level
10/10
network avg: 6.5
++
Total Reports
52
network avg: 11
++
Network BitCommand LLC has overall threat level 2/10
Geographic Comparison
Compared against 357 IPs in SC
Threat Level
10/10
country avg: 7.3
+
Total Reports
52
country avg: 91
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Wednesday
11 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
51
Hacking
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 19:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,375 threat incidents tracked globally • Last 24h: 18,936 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,136 15.5% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.5/10
Avg Threat
69%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
154.91.170.41
8/10
Confidence
97%
Reports
45
Location
SC
SC
185.221.237.10
10/10
Confidence
97%
Reports
12
Location
DE
DE
154.211.2.151
10/10
Confidence
95%
Reports
11
Location
NL
NL
43.225.90.116
10/10
Confidence
94%
Reports
21
Location
GB
GB
156.253.5.146
10/10
Confidence
91%
Reports
58
Location
NL
NL
193.36.84.79
10/10
Confidence
81%
Reports
6
Location
DE
DE
185.231.59.141
10/10
Confidence
81%
Reports
6
Location
DE
DE
141.98.210.23
8/10
Confidence
73%
Reports
11
Location
GB
GB
154.91.170.52
8/10
Confidence
72%
Reports
41
Location
SC
SC
46.249.99.46
8/10
Confidence
69%
Reports
4
Location
DE
DE
45.195.250.16
10/10
Confidence
64%
Reports
28
Location
MU
MU
82.115.25.70
8/10
Confidence
61%
Reports
5
Location
AU
AU
82.115.18.76
8/10
Confidence
61%
Reports
3
Location
AU
AU
156.255.1.208
8/10
Confidence
57%
Reports
5
Location
NL
NL
82.115.16.205
0/10
Confidence
50%
Reports
3
Location
AU
AU
82.115.20.17
8/10
Confidence
50%
Reports
3
Location
AU
AU
185.110.191.192
8/10
Confidence
50%
Reports
3
Location
DE
DE
103.75.197.188
0/10
Confidence
48%
Reports
3
Location
DE
DE
82.115.17.167
8/10
Confidence
41%
Reports
3
Location
AU
AU
193.163.201.149
0/10
Confidence
39%
Reports
2
Location
GB
GB
IPs from the same subnet range, likely same network segment.
2
Related IPs
8/10
Avg Threat
85%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
68
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
49
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
74%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.30
10/10
Confidence
74%
Reports
27,371
Location
BG
BG
147.45.50.147
10/10
Confidence
74%
Reports
3,671
Location
NL
NL
92.63.197.59
8/10
Confidence
74%
Reports
2,582
Location
UA
UA
92.63.197.92
8/10
Confidence
74%
Reports
2,461
Location
UA
UA
45.148.10.196
10/10
Confidence
74%
Reports
2,216
Location
NL
NL
165.232.68.36
8/10
Confidence
74%
Reports
1,256
Location
DE
DE
80.94.92.64
10/10
Confidence
74%
Reports
1,206
Location
RO
RO
185.246.130.20
10/10
Confidence
74%
Reports
1,137
Location
SE
SE
103.252.88.228
8/10
Confidence
74%
Reports
1,077
Location
DE
DE
80.94.92.65
10/10
Confidence
74%
Reports
904
Location
RO
RO
80.94.92.70
10/10
Confidence
74%
Reports
895
Location
RO
RO
80.94.92.69
10/10
Confidence
74%
Reports
795
Location
RO
RO
89.42.231.182
8/10
Confidence
74%
Reports
603
Location
NL
NL
152.32.253.152
10/10
Confidence
74%
Reports
601
Location
HK
HK
91.231.89.81
10/10
Confidence
74%
Reports
559
Location
FR
FR
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203