IP Address

124.217.115.156

IPv4 Public
PH PH
AS9299
Philippine Long Distance Telephone Company
6 Reports
This IP is under Observation Suspicious activity detected - monitor closely
8/10 Threat
57% Confidence
6 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Top 10% High Threat
PH
Philippines Location
Philippine Long Distance ... ASN 9299
6 Reports
Mixed Data Source

Elevated Risk

Elevated threat level 8/10 for IP 124.217.115.156 from 6 reported incidents.

Behavioral profile indicates cyber threat activity with 57% confidence.

More threatening than 91% of monitored IPs

Threat Categories

SSH 6
Brute-Force 4
Hacking 2

Technical Details

SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.

Recommended Mitigations

Use key-based authentication, change default ports, implement fail2ban, and disable root login.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 4 days indicates persistent threat actor operations.

First Observed 16. October 2026
Last Activity 20. October 2026
Recent (7 days) 6 incidents

Moderate Network Risk

The network hosting this IP (ASN 9299, operated by Philippine Long Distance Telephone Company) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.

Consider the network context when assessing this individual IP.

Security Recommendations

Enhanced monitoring recommended. Review logs for interactions with this IP.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 4/10 Low
Confidence Score 57% High Confidence

Confidence History

16. Oct 2026 - 20. Oct 2026
57% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (6)

Date Categories Source Confidence
New SSH Brute-Force Community 75%
SSH Brute-Force Community 75%
Hacking SSH Honeypot x2 75%
Hacking SSH Honeypot x2 75%
SSH Brute-Force Community 75%
SSH Brute-Force Community 75%

Technical Details

Basic Information

IP Address
124.217.115.156
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
PH PH
ASN
AS9299
ISP
Philippine Long Distance Telephone Company

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
6
First Reported
18 Oct 2026
Last Reported
20 Oct 2026, 16:50

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS9299
Philippine Long Distance Telephone Company
PH PH

Network Threat Assessment

5/10
This network has low threat indicators with minimal suspicious activity.

Network Statistics

562
Total IPs Monitored
4,563
Total Reports
8.1
Reports per IP

Network Context

This IP address belongs to Philippine Long Distance Telephone Company (AS9299), which manages 562 IP addresses in our monitoring system. Out of these, 4,563 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.

Network notice: This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.

Comparative Analysis

How this IP compares to others in our threat intelligence database

91 %

Global Threat Ranking

This IP is more threatening than 91% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 1,082,295 reported IPs worldwide

Threat Level 8/10 avg: 6.1 +
Total Reports 6 avg: 8 -

Network Comparison

Compared against 4,046 IPs in ASN 9299

Threat Level 8/10 network avg: 6.4 +
Total Reports 6 network avg: 3 ++
Network Philippine Long Distance Telephone Company has overall threat level 5/10

Geographic Comparison

Compared against 9,009 IPs in PH

Threat Level 8/10 country avg: 6.4 +
Total Reports 6 country avg: 7 =
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

986,682 threat incidents tracked globally • Last 24h: 29,035 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    187,263 19%
  2. 02
    BR
    Brazil BR
    187,117 19%
  3. 03
    IN
    India IN
    95,024 9.6%
  4. 04
    CN
    China CN
    47,925 4.9%
  5. 05
    AR
    Argentina AR
    29,757 3%
  6. 06
    SC
    SC SC
    29,344 3%
  7. 07
    DE
    Germany DE
    20,373 2.1%
  8. 08
    CO
    Colombia CO
    19,935 2%
  9. 09
    MX
    Mexico MX
    19,804 2%
  10. 10
    RU
    Russia RU
    19,589 2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same Autonomous System (AS) network provider.

20 Related IPs
8.5/10 Avg Threat
91% Avg Confidence
20 High Threat
High-risk network: Majority of related IPs are flagged

IPs from the same subnet range, likely same network segment.

2 Related IPs
8/10 Avg Threat
14% Avg Confidence
2 High Threat
High-risk network: Majority of related IPs are flagged

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "124.217.115.156",
    "threat_level": 8,
    "confidence_score": 57,
    "total_reports": 6,
    "country_code": "PH",
    "isp_name": "Philippine Long Distance Telephone Company",
    "asn": "9299",
    "first_reported": "2026-10-18 07:25:10",
    "last_reported": "2026-10-20 16:50:25",
    "exported_at": "2026-10-20T19:03:08+02:00",
    "source": "https://reportedip.com/ip/124.217.115.156/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.