Extreme Threat
IP 151.252.84.225 classified at threat level 10/10 with 105 documented attacks.
Advanced threat indicators confirmed with 86% certainty.
More threatening than 99% of monitored IPs
IP Address
151.252.84.225
IPv4
Public
RU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
RU
Location
Tele-plus LLC
ASN 30855
105
Reports
Mixed
Data Source
Threat Categories
SSH
28
Hacking
12
Brute-Force
8
Exploited Host
4
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
18. September 2026
Last Activity
7. October 2026
Recent (7 days)
8 incidents
Reputable Network
This IP is hosted on a network (ASN 30855) with generally good reputation. The ISP Tele-plus LLC maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
6/10
Moderate
Confidence Score
86%
Verified
Confidence History
6. Jun 2026 - 7. Oct 2026
86%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH Brute-Force | Community | 75% |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH Brute-Force | Community | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 151.252.84.225
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
RU
- ASN
- AS30855
- ISP
- Tele-plus LLC
DNS Information
- Reverse DNS
- 151.252.84.225.ip.tele-plus.ru
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 105
- First Reported
- 21 Feb 2026
- Last Reported
- 7 Oct 2026, 20:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS30855
Tele-plus LLC
RU
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
3
Total IPs Monitored
76
Total Reports
25.3
Reports per IP
Network Context
This IP address belongs to Tele-plus LLC (AS30855), which manages 3 IP addresses in our monitoring system. Out of these, 76 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 833,268 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
105
avg: 9
++
Network Comparison
Compared against 5 IPs in ASN 30855
Threat Level
10/10
network avg: 7.6
+
Total Reports
105
network avg: 23
++
Network Tele-plus LLC has overall threat level 3/10
Geographic Comparison
Compared against 13,672 IPs in RU
Threat Level
10/10
country avg: 6.5
++
Total Reports
105
country avg: 9
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Oct 2026
7 reports
Daily Average
0.6
reports/day
Most Active
Saturday
24 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
103
Hacking
12
Brute-Force
9
Exploited Host
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 9 reports
Weekly Activity
Geographic Threat Distribution
757,519 threat incidents tracked globally • Last 24h: 30,670 Logs
FEED
Top Threat Sources
-
01
United States148,275 19.6% -
02
Brazil111,878 14.8%
-
03
India87,206 11.5%
-
04
China46,091 6.1%
-
05
SC29,253 3.9%
-
06
Germany18,444 2.4%
-
07
Netherlands18,000 2.4%
-
08
Pakistan17,824 2.4%
-
09
Argentina16,272 2.1%
-
10
Colombia15,171 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
7/10
Avg Threat
9%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
89.108.74.178
10/10
Confidence
100%
Reports
63
ISP
Domain names re...
91.188.185.101
10/10
Confidence
100%
Reports
28
ISP
Digit One LLC
188.235.18.124
10/10
Confidence
100%
Reports
25
ISP
JSC ER-Telecom ...
82.208.125.106
10/10
Confidence
100%
Reports
16
ISP
Rostelecom
104.28.212.74
8/10
Confidence
100%
Reports
16
ISP
Cloudflare, Inc.
188.43.28.193
10/10
Confidence
100%
Reports
15
ISP
Joint Stock Com...
77.94.99.50
8/10
Confidence
100%
Reports
13
ISP
PJSC Bashinform...
188.0.18.116
8/10
Confidence
100%
Reports
12
ISP
YarTV Ltd.
94.180.139.162
8/10
Confidence
100%
Reports
11
ISP
JSC ER-Telecom ...
80.251.156.20
8/10
Confidence
99%
Reports
18
ISP
MTS PJSC
194.226.49.237
10/10
Confidence
98%
Reports
16
ISP
Ztv Corp LLC
89.169.177.53
10/10
Confidence
98%
Reports
14
ISP
Yandex.Cloud LLC
104.28.161.42
8/10
Confidence
98%
Reports
13
ISP
Cloudflare, Inc.
95.174.127.178
8/10
Confidence
98%
Reports
12
ISP
Consumer Intern...
5.165.19.3
10/10
Confidence
98%
Reports
11
ISP
JSC ER-Telecom ...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.241
8/10
Confidence
86%
Reports
937
Location
TW
TW
189.194.140.170
10/10
Confidence
86%
Reports
181
Location
MX
MX
91.230.168.96
10/10
Confidence
86%
Reports
200
Location
US
US
91.230.168.227
10/10
Confidence
86%
Reports
188
Location
US
US
46.40.245.6
10/10
Confidence
86%
Reports
8
Location
OM
OM
136.90.94.238
8/10
Confidence
86%
Reports
8
Location
US
US
176.53.159.196
10/10
Confidence
86%
Reports
2,119
Location
TR
TR
89.251.0.6
10/10
Confidence
86%
Reports
7
Location
CA
CA
34.156.83.50
8/10
Confidence
86%
Reports
11
Location
BE
BE
58.37.98.218
10/10
Confidence
86%
Reports
10
Location
CN
CN
195.184.76.5
8/10
Confidence
86%
Reports
260
Location
US
US
91.196.152.55
8/10
Confidence
86%
Reports
187
Location
FR
FR
122.176.62.126
8/10
Confidence
86%
Reports
23
Location
IN
IN
36.92.140.209
10/10
Confidence
86%
Reports
57
Location
ID
ID
66.132.224.82
8/10
Confidence
86%
Reports
163
Location
US
US