Extreme Threat
IP 111.68.107.91 classified at threat level 10/10 with 11 documented attacks.
Advanced threat indicators confirmed with 96% certainty.
More threatening than 99% of monitored IPs
IP Address
111.68.107.91
IPv4
Public
PK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
PK
Location
PERN AS Content Servie Pr...
ASN 45773
11
Reports
Honeypot
Data Source
Threat Categories
SSH
9
Hacking
8
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
25. May 2026
Last Activity
25. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 45773) with generally good reputation. The ISP PERN AS Content Servie Provider, Islamabad, Pakistan maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
82%
Verified
Confidence History
23. Feb 2026 - 25. May 2026
96%
Current
Stable
Trend
Security Reports (11)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking SSH | Honeypot x3 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 111.68.107.91
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
PK
- ASN
- AS45773
- ISP
- PERN AS Content Servie Provider, Islamabad, Pakistan
DNS Information
- Reverse DNS
- 111.68.107.91.pern.pk
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 11
- First Reported
- 23 Feb 2026
- Last Reported
- 25 May 2026, 20:11
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS45773
PERN AS Content Servie Provider, Islamabad, Pakistan
PK
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
20
Total IPs Monitored
719
Total Reports
36
Reports per IP
Network Context
This IP address belongs to PERN AS Content Servie Provider, Islamabad, Pakistan (AS45773), which manages 20 IP addresses in our monitoring system. Out of these, 719 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,484 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
11
avg: 23
--
Network Comparison
Compared against 36 IPs in ASN 45773
Threat Level
10/10
network avg: 6.2
++
Total Reports
11
network avg: 22
-
Network PERN AS Content Servie Provider, Islamabad, Pakistan has overall threat level 2/10
Geographic Comparison
Compared against 4,654 IPs in PK
Threat Level
10/10
country avg: 5.4
++
Total Reports
11
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
25 May 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Monday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
9
Hacking
8
Exploited Host
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5%
-
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.8/10
Avg Threat
55%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
111.68.98.152
10/10
Confidence
91%
Reports
91
Location
PK
PK
165.101.126.96
10/10
Confidence
90%
Reports
115
Location
PK
PK
121.52.147.5
10/10
Confidence
88%
Reports
73
Location
PK
PK
111.68.97.251
8/10
Confidence
78%
Reports
16
Location
PK
PK
103.4.92.103
8/10
Confidence
72%
Reports
61
Location
PK
PK
111.68.106.105
10/10
Confidence
68%
Reports
8
Location
PK
PK
121.52.154.238
10/10
Confidence
65%
Reports
305
Location
PK
PK
111.68.103.14
10/10
Confidence
60%
Reports
37
Location
PK
PK
121.52.144.251
10/10
Confidence
58%
Reports
10
Location
PK
PK
111.68.99.9
8/10
Confidence
52%
Reports
3
Location
PK
PK
111.68.96.34
0/10
Confidence
45%
Reports
3
Location
PK
PK
111.68.109.252
0/10
Confidence
42%
Reports
3
Location
PK
PK
121.52.153.7
10/10
Confidence
40%
Reports
3
Location
PK
PK
121.52.150.220
7/10
Confidence
40%
Reports
2
Location
PK
PK
111.68.102.19
7/10
Confidence
36%
Reports
4
Location
PK
PK
121.52.158.248
7/10
Confidence
35%
Reports
4
Location
PK
PK
121.52.150.221
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.96.22
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.111.70
0/10
Confidence
35%
Reports
2
Location
PK
PK
111.68.110.252
10/10
Confidence
34%
Reports
4
Location
PK
PK
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
154.57.216.142
10/10
Confidence
99%
Reports
53
ISP
Trans World Ent...
124.29.207.189
8/10
Confidence
99%
Reports
38
ISP
Cyber Internet ...
72.255.9.39
8/10
Confidence
99%
Reports
22
ISP
Cyber Internet ...
103.164.9.74
10/10
Confidence
98%
Reports
45
ISP
KHAZANA ENTERPR...
154.57.193.173
8/10
Confidence
98%
Reports
22
ISP
Trans World Ent...
103.138.51.150
10/10
Confidence
97%
Reports
17
ISP
CITS PVT LTD
103.166.103.173
10/10
Confidence
97%
Reports
15
ISP
Grand Tel Priva...
203.128.24.180
8/10
Confidence
96%
Reports
24
ISP
S. B Link Network
43.228.157.16
10/10
Confidence
94%
Reports
57
ISP
M247 Europe SRL
43.228.157.15
10/10
Confidence
94%
Reports
57
ISP
M247 Europe SRL
182.191.77.164
10/10
Confidence
94%
Reports
56
ISP
Pakistan Teleco...
43.228.157.191
10/10
Confidence
94%
Reports
54
ISP
Ghosty Networks...
43.228.157.12
10/10
Confidence
94%
Reports
54
ISP
M247 Europe SRL
43.228.157.21
10/10
Confidence
94%
Reports
52
ISP
M247 Europe SRL
43.228.157.17
10/10
Confidence
94%
Reports
51
ISP
M247 Europe SRL
IPs with similar threat level and confidence scores.
15
Related IPs
8.8/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
16.58.56.214
8/10
Confidence
96%
Reports
2,336
Location
US
US
18.116.101.220
8/10
Confidence
96%
Reports
2,170
Location
US
US
18.218.118.203
8/10
Confidence
96%
Reports
1,949
Location
US
US
45.148.10.183
10/10
Confidence
96%
Reports
1,929
Location
NL
NL
3.129.187.38
8/10
Confidence
96%
Reports
1,861
Location
US
US
3.130.168.2
8/10
Confidence
96%
Reports
1,647
Location
US
US
3.131.220.121
8/10
Confidence
96%
Reports
1,306
Location
US
US
3.132.26.232
8/10
Confidence
96%
Reports
939
Location
US
US
185.91.127.85
10/10
Confidence
96%
Reports
921
Location
DE
DE
193.142.146.230
8/10
Confidence
96%
Reports
818
Location
DE
DE
3.134.216.108
8/10
Confidence
96%
Reports
740
Location
US
US
78.153.140.177
10/10
Confidence
96%
Reports
686
Location
GB
GB
106.75.184.142
10/10
Confidence
96%
Reports
677
Location
CN
CN
106.75.156.189
10/10
Confidence
96%
Reports
670
Location
CN
CN
106.75.157.47
10/10
Confidence
96%
Reports
661
Location
CN
CN
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203