Substantial Risk
Threat level 8/10 for 124.43.4.17 based on 49 documented incidents.
Consistent suspicious behavior patterns. 78% confidence rating.
More threatening than 80% of monitored IPs
IP Address
124.43.4.17
IPv4
Public
LK
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
LK
Location
Sri Lanka Telecom Interne...
ASN 9329
49
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
13. May 2026
Last Activity
13. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 9329) with generally good reputation. The ISP Sri Lanka Telecom Internet maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
70%
High Confidence
Confidence History
25. Feb 2026 - 13. May 2026
78%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 124.43.4.17
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
LK
- ASN
- AS9329
- ISP
- Sri Lanka Telecom Internet
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 49
- First Reported
- 21 Feb 2026
- Last Reported
- 13 May 2026, 01:00
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9329
Sri Lanka Telecom Internet
LK
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
50
Total IPs Monitored
819
Total Reports
16.4
Reports per IP
Network Context
This IP address belongs to Sri Lanka Telecom Internet (AS9329), which manages 50 IP addresses in our monitoring system. Out of these, 819 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
80
%
Global Threat Ranking
This IP is more threatening than 80% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,730 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
49
avg: 23
++
Network Comparison
Compared against 169 IPs in ASN 9329
Threat Level
8/10
network avg: 5.4
+
Total Reports
49
network avg: 8
++
Network Sri Lanka Telecom Internet has overall threat level 2/10
Geographic Comparison
Compared against 639 IPs in LK
Threat Level
8/10
country avg: 5.2
++
Total Reports
49
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
13 May 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
14 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
49
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.1/10
Avg Threat
68%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
222.165.190.235
8/10
Confidence
100%
Reports
592
Location
LK
LK
124.43.5.103
8/10
Confidence
97%
Reports
33
Location
LK
LK
112.134.143.110
10/10
Confidence
94%
Reports
45
Location
LK
LK
220.247.224.226
10/10
Confidence
93%
Reports
118
Location
LK
LK
203.94.67.2
10/10
Confidence
81%
Reports
15
Location
LK
LK
124.43.6.59
8/10
Confidence
78%
Reports
15
Location
LK
LK
124.43.65.29
8/10
Confidence
74%
Reports
10
Location
LK
LK
124.43.252.230
10/10
Confidence
73%
Reports
12
Location
LK
LK
220.247.223.56
10/10
Confidence
66%
Reports
140
Location
LK
LK
112.134.185.14
10/10
Confidence
66%
Reports
19
Location
LK
LK
220.247.234.171
10/10
Confidence
60%
Reports
57
Location
LK
LK
124.43.28.216
10/10
Confidence
60%
Reports
31
Location
LK
LK
124.43.12.105
8/10
Confidence
55%
Reports
13
Location
LK
LK
124.43.10.224
8/10
Confidence
55%
Reports
4
Location
LK
LK
112.134.177.239
8/10
Confidence
53%
Reports
10
Location
LK
LK
112.134.183.28
8/10
Confidence
53%
Reports
8
Location
LK
LK
112.134.188.114
8/10
Confidence
53%
Reports
3
Location
LK
LK
112.134.168.80
10/10
Confidence
52%
Reports
10
Location
LK
LK
203.115.8.170
0/10
Confidence
51%
Reports
4
Location
LK
LK
124.43.6.160
0/10
Confidence
48%
Reports
3
Location
LK
LK
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
81%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
222.165.190.235
8/10
Confidence
100%
Reports
592
ISP
Sri Lanka Telec...
124.43.5.103
8/10
Confidence
97%
Reports
33
ISP
Sri Lanka Telec...
112.134.143.110
10/10
Confidence
94%
Reports
45
ISP
Sri Lanka Telec...
202.124.183.58
8/10
Confidence
93%
Reports
122
ISP
Dialog Axiata PLC.
220.247.224.226
10/10
Confidence
93%
Reports
118
ISP
Sri Lanka Telec...
203.94.67.2
10/10
Confidence
81%
Reports
15
ISP
Sri Lanka Telec...
43.224.126.107
10/10
Confidence
79%
Reports
25
ISP
Information and...
124.43.6.59
8/10
Confidence
78%
Reports
15
ISP
Sri Lanka Telec...
123.231.45.166
8/10
Confidence
77%
Reports
13
ISP
Dialog Axiata PLC.
123.231.95.32
8/10
Confidence
75%
Reports
15
ISP
Dialog Axiata PLC.
124.43.65.29
8/10
Confidence
74%
Reports
10
ISP
Sri Lanka Telec...
124.43.252.230
10/10
Confidence
73%
Reports
12
ISP
Sri Lanka Telec...
123.231.113.87
8/10
Confidence
68%
Reports
9
ISP
Dialog Axiata PLC.
220.247.223.56
10/10
Confidence
66%
Reports
140
ISP
Sri Lanka Telec...
112.134.185.14
10/10
Confidence
66%
Reports
19
ISP
Sri Lanka Telec...
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
78%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
207.90.244.5
8/10
Confidence
78%
Reports
18,185
Location
US
US
143.110.239.2
8/10
Confidence
78%
Reports
11,935
Location
US
US
64.225.74.178
8/10
Confidence
78%
Reports
9,572
Location
NL
NL
185.156.73.167
8/10
Confidence
78%
Reports
2,534
Location
UA
UA
80.94.92.67
10/10
Confidence
78%
Reports
1,569
Location
RO
RO
64.62.197.137
8/10
Confidence
78%
Reports
911
Location
US
US
95.215.0.144
8/10
Confidence
78%
Reports
832
Location
RU
RU
216.126.239.150
10/10
Confidence
78%
Reports
828
Location
US
US
78.153.140.147
10/10
Confidence
78%
Reports
819
Location
GB
GB
93.123.109.192
10/10
Confidence
78%
Reports
804
Location
BG
BG
5.188.154.78
10/10
Confidence
78%
Reports
695
Location
KZ
KZ
80.94.92.182
10/10
Confidence
78%
Reports
671
Location
RO
RO
34.58.124.191
10/10
Confidence
78%
Reports
644
Location
US
US
109.199.98.14
10/10
Confidence
78%
Reports
573
Location
FR
FR
178.214.77.7
10/10
Confidence
78%
Reports
536
Location
PS
PS
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203