Significant Threat
IP 154.91.170.52 identified as significant threat (8/10) from 41 events.
Multiple malicious indicators detected. Confidence level: 72%.
More threatening than 79% of monitored IPs
IP Address
154.91.170.52
IPv4
Public
SC
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
SC
Location
BitCommand LLC
ASN 212552
41
Reports
Honeypot
Data Source
Threat Categories
SSH
30
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 212552) with generally good reputation. The ISP BitCommand LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
68%
High Confidence
Confidence History
24. Feb 2026 - 6. Mar 2026
72%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 154.91.170.52
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SC
- ASN
- AS212552
- ISP
- BitCommand LLC
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 41
- First Reported
- 20 Feb 2026
- Last Reported
- 6 Mar 2026, 06:26
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS212552
BitCommand LLC
NL
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
16
Total IPs Monitored
267
Total Reports
16.7
Reports per IP
Network Context
This IP address belongs to BitCommand LLC (AS212552), which manages 16 IP addresses in our monitoring system. Out of these, 267 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 200,068 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
41
avg: 23
++
Network Comparison
Compared against 31 IPs in ASN 212552
Threat Level
8/10
network avg: 6.5
+
Total Reports
41
network avg: 11
++
Network BitCommand LLC has overall threat level 2/10
Geographic Comparison
Compared against 358 IPs in SC
Threat Level
8/10
country avg: 7.3
=
Total Reports
41
country avg: 90
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
41
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
187,720 threat incidents tracked globally • Last 24h: 18,948 Logs
FEED
Top Threat Sources
-
01
United States38,493 20.5% -
02
India29,262 15.6% -
03
China26,047 13.9% -
04
Brazil10,264 5.5% -
05
Germany7,151 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,561 3% -
08
Russia4,712 2.5% -
09
Pakistan4,710 2.5% -
10
Netherlands4,363 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.6/10
Avg Threat
69%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
154.91.170.41
8/10
Confidence
97%
Reports
45
Location
SC
SC
185.221.237.10
10/10
Confidence
97%
Reports
12
Location
DE
DE
154.211.2.151
10/10
Confidence
95%
Reports
11
Location
NL
NL
43.225.90.116
10/10
Confidence
94%
Reports
21
Location
GB
GB
156.253.5.146
10/10
Confidence
91%
Reports
58
Location
NL
NL
193.36.84.79
10/10
Confidence
81%
Reports
6
Location
DE
DE
185.231.59.141
10/10
Confidence
81%
Reports
6
Location
DE
DE
154.91.170.15
10/10
Confidence
74%
Reports
52
Location
SC
SC
141.98.210.23
8/10
Confidence
73%
Reports
11
Location
GB
GB
46.249.99.46
8/10
Confidence
68%
Reports
4
Location
DE
DE
45.195.250.16
10/10
Confidence
64%
Reports
28
Location
MU
MU
82.115.25.70
8/10
Confidence
61%
Reports
5
Location
AU
AU
82.115.18.76
8/10
Confidence
61%
Reports
3
Location
AU
AU
156.255.1.208
8/10
Confidence
57%
Reports
5
Location
NL
NL
82.115.16.205
0/10
Confidence
50%
Reports
3
Location
AU
AU
82.115.20.17
8/10
Confidence
50%
Reports
3
Location
AU
AU
185.110.191.192
8/10
Confidence
50%
Reports
3
Location
DE
DE
103.75.197.188
0/10
Confidence
48%
Reports
3
Location
DE
DE
82.115.17.167
8/10
Confidence
41%
Reports
3
Location
AU
AU
193.163.201.149
0/10
Confidence
39%
Reports
2
Location
GB
GB
IPs from the same subnet range, likely same network segment.
2
Related IPs
9/10
Avg Threat
86%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
156.245.246.50
10/10
Confidence
100%
Reports
69
ISP
VpsQuan L.L.C.
156.232.13.218
10/10
Confidence
98%
Reports
54
ISP
YISU CLOUD LTD
156.238.224.50
10/10
Confidence
98%
Reports
18
ISP
FASTNET DATA INC
156.239.225.149
10/10
Confidence
97%
Reports
115
ISP
Gcc Cloud Techn...
212.11.64.25
8/10
Confidence
97%
Reports
49
ISP
Global-Data Sys...
154.91.170.41
8/10
Confidence
97%
Reports
45
ISP
BitCommand LLC
212.11.64.155
8/10
Confidence
97%
Reports
42
ISP
Global-Data Sys...
193.39.208.26
10/10
Confidence
97%
Reports
27
ISP
Global Connecti...
69.5.189.125
8/10
Confidence
97%
Reports
26
ISP
Global-Data Sys...
156.238.246.218
8/10
Confidence
97%
Reports
24
ISP
COGNETCLOUD
69.5.189.131
8/10
Confidence
97%
Reports
21
ISP
Global-Data Sys...
5.61.209.33
10/10
Confidence
96%
Reports
51
ISP
Amarutu Technol...
156.238.252.133
10/10
Confidence
95%
Reports
125
ISP
FD-298-8796
154.198.162.75
10/10
Confidence
95%
Reports
104
ISP
Scloud Pte Ltd
5.61.209.224
10/10
Confidence
94%
Reports
2,497
ISP
Amarutu Technol...
IPs with similar threat level and confidence scores.
15
Related IPs
9.4/10
Avg Threat
72%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
187.108.1.130
8/10
Confidence
72%
Reports
4,633
Location
BR
BR
49.64.242.249
10/10
Confidence
72%
Reports
2,977
Location
CN
CN
92.63.197.55
8/10
Confidence
72%
Reports
2,582
Location
UA
UA
179.51.153.37
10/10
Confidence
72%
Reports
2,285
Location
BR
BR
198.235.24.42
10/10
Confidence
72%
Reports
1,054
Location
US
US
103.183.75.90
10/10
Confidence
72%
Reports
829
Location
ID
ID
147.185.133.104
10/10
Confidence
72%
Reports
750
Location
US
US
78.153.140.43
10/10
Confidence
72%
Reports
622
Location
GB
GB
45.144.212.136
7/10
Confidence
72%
Reports
604
Location
UA
UA
85.215.119.240
8/10
Confidence
72%
Reports
589
Location
DE
DE
45.79.181.104
10/10
Confidence
72%
Reports
576
Location
US
US
118.193.65.234
10/10
Confidence
72%
Reports
551
Location
GB
GB
118.193.58.187
10/10
Confidence
72%
Reports
483
Location
DE
DE
173.239.240.145
10/10
Confidence
72%
Reports
467
Location
US
US
130.12.180.55
10/10
Confidence
72%
Reports
463
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203