Extreme Threat
IP 197.254.238.254 classified at threat level 10/10 with 39 documented attacks.
Advanced threat indicators confirmed with 88% certainty.
More threatening than 97% of monitored IPs
IP Address
197.254.238.254
IPv4
Public
SD
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
SD
Location
KANARTEL
ASN 33788
39
Reports
Mixed
Data Source
Threat Categories
Brute-Force
18
WP Login Brute Force
14
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
8. July 2026
Last Activity
5. August 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 33788) with elevated threat levels. The ISP KANARTEL hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
5/10
Moderate
Confidence Score
88%
Verified
Confidence History
22. May 2026 - 5. Aug 2026
88%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP Login Brute Force | Honeypot | 75% |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 197.254.238.254
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
SD
- ASN
- AS33788
- ISP
- KANARTEL
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 39
- First Reported
- 8 Apr 2026
- Last Reported
- 5 Aug 2026, 20:50
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS33788
KANARTEL
SD
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
2
Total Reports
2
Reports per IP
Network Context
This IP address belongs to KANARTEL (AS33788), which manages 1 IP addresses in our monitoring system. Out of these, 2 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 312,087 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
39
avg: 18
++
Network Comparison
Compared against 2 IPs in ASN 33788
Threat Level
10/10
network avg: 8.5
+
Total Reports
39
network avg: 22
++
Network KANARTEL has overall threat level 8/10
Geographic Comparison
Compared against 88 IPs in SD
Threat Level
10/10
country avg: 5.7
++
Total Reports
39
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 Jul 2026
2 reports
Daily Average
0.6
reports/day
Most Active
Wednesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
23
WP Login Brute Force
17
Hacking
1
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
292,710 threat incidents tracked globally • Last 24h: 17,666 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,555 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
29%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
5.7/10
Avg Threat
35%
Avg Confidence
11
High Threat
High-risk network: Majority of related IPs are flagged
41.209.126.101
10/10
Confidence
81%
Reports
15
ISP
Sudatel
154.100.22.96
7/10
Confidence
40%
Reports
2
ISP
ZAIN SD 2G 3G L...
154.100.11.96
7/10
Confidence
40%
Reports
2
ISP
Sudanese Mobile...
154.100.30.102
7/10
Confidence
39%
Reports
2
ISP
Sudanese Mobile...
196.1.250.242
7/10
Confidence
30%
Reports
44
ISP
Sudatel
41.209.123.23
0/10
Confidence
30%
Reports
3
ISP
Sudatel
196.1.204.134
7/10
Confidence
30%
Reports
1
ISP
Sudatel (Sudan ...
196.202.155.182
0/10
Confidence
30%
Reports
1
ISP
Sudatel
196.202.141.142
7/10
Confidence
30%
Reports
1
ISP
Sudatel (Sudan ...
197.252.169.81
7/10
Confidence
30%
Reports
1
ISP
Sudatel
196.1.201.162
0/10
Confidence
30%
Reports
1
ISP
Sudatel
197.251.66.86
7/10
Confidence
30%
Reports
1
ISP
Sudanese Resear...
102.121.172.53
7/10
Confidence
30%
Reports
1
ISP
MTN SUDAN
197.254.237.210
7/10
Confidence
29%
Reports
5
ISP
Kanar Telecommu...
41.209.92.50
6/10
Confidence
29%
Reports
2
ISP
Sudatel (Sudan ...
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
88%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
66.132.172.162
10/10
Confidence
88%
Reports
5,749
Location
US
US
66.132.172.167
8/10
Confidence
88%
Reports
5,672
Location
US
US
66.132.172.171
10/10
Confidence
88%
Reports
5,632
Location
US
US
80.94.92.183
10/10
Confidence
88%
Reports
5,389
Location
RO
RO
16.58.56.214
8/10
Confidence
88%
Reports
3,681
Location
US
US
18.218.118.203
8/10
Confidence
88%
Reports
3,184
Location
US
US
35.240.174.82
10/10
Confidence
88%
Reports
1,735
Location
SG
SG
204.76.203.73
10/10
Confidence
88%
Reports
1,724
Location
NL
NL
80.94.95.169
8/10
Confidence
88%
Reports
1,001
Location
RO
RO
185.242.3.100
7/10
Confidence
88%
Reports
791
Location
NL
NL
185.242.226.9
10/10
Confidence
88%
Reports
705
Location
US
US
167.94.146.63
8/10
Confidence
88%
Reports
661
Location
US
US
185.242.226.72
10/10
Confidence
88%
Reports
534
Location
US
US
216.218.206.69
8/10
Confidence
88%
Reports
507
Location
US
US
176.32.193.16
8/10
Confidence
88%
Reports
448
Location
AM
AM