Critical Alert
Security alert: 212.154.234.9 rated 10/10 based on 127 verified incidents.
Threat profile indicates sustained malicious activity with 92% confidence rating.
More threatening than 97% of monitored IPs
IP Address
212.154.234.9
IPv4
Public
KZ
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
KZ
Location
JSC Kazakhtelecom
ASN 50482
127
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
3
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
18. May 2026
Last Activity
8. June 2026
Recent (7 days)
9 incidents
Reputable Network
This IP is hosted on a network (ASN 50482) with generally good reputation. The ISP JSC Kazakhtelecom maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
6/10
Moderate
Confidence Score
92%
Verified
Confidence History
28. Apr 2026 - 8. Jun 2026
92%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 212.154.234.9
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
KZ
- ASN
- AS50482
- ISP
- JSC Kazakhtelecom
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 127
- First Reported
- 19 Feb 2026
- Last Reported
- 8 Jun 2026, 17:29
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS50482
JSC Kazakhtelecom
KZ
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5
Total IPs Monitored
97
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to JSC Kazakhtelecom (AS50482), which manages 5 IP addresses in our monitoring system. Out of these, 97 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,576 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
127
avg: 23
++
Network Comparison
Compared against 8 IPs in ASN 50482
Threat Level
10/10
network avg: 7.3
+
Total Reports
127
network avg: 18
++
Network JSC Kazakhtelecom has overall threat level 3/10
Geographic Comparison
Compared against 381 IPs in KZ
Threat Level
10/10
country avg: 5.1
++
Total Reports
127
country avg: 9
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 May 2026
5 reports
Daily Average
0.7
reports/day
Most Active
Thursday
30 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
122
Hacking
10
Exploited Host
5
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 20:00 with 11 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
7
Related IPs
6.9/10
Avg Threat
37%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
212.154.203.144
10/10
Confidence
61%
Reports
8
Location
KZ
KZ
212.154.154.216
10/10
Confidence
43%
Reports
4
Location
KZ
KZ
212.154.212.110
7/10
Confidence
38%
Reports
1
Location
KZ
KZ
212.154.166.174
7/10
Confidence
30%
Reports
1
Location
KZ
KZ
212.154.197.132
7/10
Confidence
30%
Reports
1
Location
KZ
KZ
212.154.203.238
0/10
Confidence
30%
Reports
1
Location
KZ
KZ
212.19.134.75
7/10
Confidence
29%
Reports
1
Location
KZ
KZ
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.124.88.29
10/10
Confidence
98%
Reports
27
ISP
Kar-Tel LLC
89.107.99.224
10/10
Confidence
97%
Reports
92
ISP
BTcom Infocommu...
91.147.92.31
8/10
Confidence
97%
Reports
44
ISP
PS Internet Com...
213.166.81.185
8/10
Confidence
97%
Reports
28
ISP
TOO Internet Re...
92.46.38.226
10/10
Confidence
97%
Reports
20
ISP
JSC Kazakhtelecom
91.201.216.61
10/10
Confidence
97%
Reports
19
ISP
Hyper Cloud Sol...
89.218.69.66
10/10
Confidence
96%
Reports
93
ISP
JSC Kazakhtelecom
45.66.52.41
8/10
Confidence
95%
Reports
11
ISP
NLS Kazakhstan LLC
5.35.107.110
10/10
Confidence
94%
Reports
78
ISP
Cloud Services ...
5.251.10.135
10/10
Confidence
94%
Reports
31
ISP
JSC Kazakhtelecom
139.45.211.20
10/10
Confidence
94%
Reports
20
ISP
RETN KZ Ltd
46.247.41.113
10/10
Confidence
94%
Reports
14
ISP
PS Internet Com...
95.58.255.251
10/10
Confidence
90%
Reports
84
ISP
JSC Kazakhtelecom
85.202.194.251
8/10
Confidence
84%
Reports
53
ISP
PS Internet Com...
185.116.193.8
10/10
Confidence
84%
Reports
23
ISP
LLP Kompaniya H...
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
176.65.149.27
10/10
Confidence
92%
Reports
3,993
Location
NL
NL
51.159.110.167
10/10
Confidence
92%
Reports
1,520
Location
FR
FR
31.70.66.9
8/10
Confidence
92%
Reports
708
Location
DE
DE
5.39.101.60
8/10
Confidence
92%
Reports
661
Location
FR
FR
207.90.244.12
10/10
Confidence
92%
Reports
543
Location
US
US
167.94.146.50
8/10
Confidence
92%
Reports
468
Location
US
US
87.106.98.147
8/10
Confidence
92%
Reports
455
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
434
Location
DE
DE
172.245.112.205
10/10
Confidence
92%
Reports
427
Location
US
US
217.160.24.45
8/10
Confidence
92%
Reports
422
Location
DE
DE
185.242.226.104
10/10
Confidence
92%
Reports
417
Location
US
US
87.106.78.3
8/10
Confidence
92%
Reports
417
Location
DE
DE
185.132.46.108
8/10
Confidence
92%
Reports
410
Location
DE
DE
87.106.189.67
8/10
Confidence
92%
Reports
409
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203