Critical Alert
Security alert: 212.154.234.9 rated 10/10 based on 170 verified incidents.
Threat profile indicates sustained malicious activity with 81% confidence rating.
More threatening than 99% of monitored IPs
IP Address
212.154.234.9
IPv4
Public
KZ
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
KZ
Location
JSC Kazakhtelecom
ASN 50482
170
Reports
Mixed
Data Source
Threat Categories
SSH
30
Brute-Force
6
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
6. September 2026
Last Activity
29. September 2026
Recent (7 days)
13 incidents
Reputable Network
This IP is hosted on a network (ASN 50482) with generally good reputation. The ISP JSC Kazakhtelecom maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
7/10
High
Confidence Score
81%
Verified
Confidence History
30. Jun 2026 - 29. Sep 2026
81%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 212.154.234.9
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
KZ
- ASN
- AS50482
- ISP
- JSC Kazakhtelecom
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 170
- First Reported
- 19 Feb 2026
- Last Reported
- 29 Sep 2026, 14:30
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS50482
JSC Kazakhtelecom
KZ
Network Threat Assessment
3/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
5
Total IPs Monitored
97
Total Reports
19.4
Reports per IP
Network Context
This IP address belongs to JSC Kazakhtelecom (AS50482), which manages 5 IP addresses in our monitoring system. Out of these, 97 have been reported for suspicious activities, resulting in a network-wide threat level of 3/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 806,271 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
170
avg: 9
++
Network Comparison
Compared against 20 IPs in ASN 50482
Threat Level
10/10
network avg: 6.1
++
Total Reports
170
network avg: 10
++
Network JSC Kazakhtelecom has overall threat level 3/10
Geographic Comparison
Compared against 1,904 IPs in KZ
Threat Level
10/10
country avg: 5.4
++
Total Reports
170
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
24 Sep 2026
3 reports
Daily Average
0.8
reports/day
Most Active
Monday
33 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
164
Hacking
14
Exploited Host
7
Brute-Force
6
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 03:00 with 13 reports
Weekly Activity
Geographic Threat Distribution
733,188 threat incidents tracked globally • Last 24h: 28,825 Logs
FEED
Top Threat Sources
-
01
United States143,190 19.5% -
02
Brazil110,727 15.1%
-
03
India82,109 11.2%
-
04
China44,727 6.1%
-
05
SC29,233 4%
-
06
Germany17,474 2.4%
-
07
Netherlands17,459 2.4%
-
08
Pakistan16,628 2.3%
-
09
Argentina16,188 2.2%
-
10
Colombia15,132 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
19
Related IPs
5.8/10
Avg Threat
17%
Avg Confidence
9
High Threat
Elevated risk: Multiple related IPs are flagged
212.154.203.26
8/10
Confidence
57%
Reports
3
Location
KZ
KZ
212.154.203.144
10/10
Confidence
35%
Reports
10
Location
KZ
KZ
92.47.163.122
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
212.154.203.156
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
212.154.234.46
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
92.46.204.86
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
212.154.212.195
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
212.154.192.162
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
212.154.212.123
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
92.47.124.246
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
92.47.95.1
4/10
Confidence
23%
Reports
1
Location
KZ
KZ
212.154.212.231
5/10
Confidence
13%
Reports
1
Location
KZ
KZ
212.154.154.216
10/10
Confidence
6%
Reports
6
Location
KZ
KZ
92.46.235.230
7/10
Confidence
3%
Reports
1
Location
KZ
KZ
212.19.134.75
7/10
Confidence
1%
Reports
1
Location
KZ
KZ
212.154.166.174
7/10
Confidence
1%
Reports
1
Location
KZ
KZ
212.154.197.132
7/10
Confidence
1%
Reports
1
Location
KZ
KZ
212.154.212.110
7/10
Confidence
0%
Reports
1
Location
KZ
KZ
212.154.203.238
7/10
Confidence
0%
Reports
1
Location
KZ
KZ
IPs from the same subnet range, likely same network segment.
1
Related IPs
4/10
Avg Threat
23%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.136.15.19
10/10
Confidence
94%
Reports
16
ISP
AO ALMAZ
185.136.15.55
8/10
Confidence
94%
Reports
13
ISP
AO ALMAZ
95.58.221.186
10/10
Confidence
91%
Reports
9
ISP
JSC Kazakhtelecom
185.136.15.82
10/10
Confidence
89%
Reports
38
ISP
Vlad Cojuhari
95.58.255.251
10/10
Confidence
88%
Reports
130
ISP
JSC Kazakhtelecom
82.200.235.132
8/10
Confidence
87%
Reports
9
ISP
JSC Kazakhtelecom
145.249.125.36
10/10
Confidence
85%
Reports
62
ISP
Kar-Tel LLC
89.218.93.13
10/10
Confidence
85%
Reports
16
ISP
JSC Kazakhtelecom
185.206.32.100
8/10
Confidence
84%
Reports
10
ISP
Cloud Master LLP
92.47.46.174
8/10
Confidence
83%
Reports
24
ISP
JSC Kazakhtelecom
185.136.15.81
10/10
Confidence
78%
Reports
36
ISP
Vlad Cojuhari
5.180.42.23
8/10
Confidence
75%
Reports
7
ISP
NLS Kazakhstan LLC
88.204.245.66
8/10
Confidence
74%
Reports
7
ISP
JSC Kazakhtelecom
185.233.3.95
10/10
Confidence
72%
Reports
199
ISP
Enterprise Clou...
146.59.95.254
10/10
Confidence
72%
Reports
70
ISP
OVH SAS
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
81%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.191.209.118
10/10
Confidence
81%
Reports
2,285
Location
BG
BG
195.178.110.137
10/10
Confidence
81%
Reports
1,449
Location
BG
BG
212.83.170.244
7/10
Confidence
81%
Reports
1,420
Location
FR
FR
45.91.64.7
8/10
Confidence
81%
Reports
1,097
Location
RU
RU
167.94.146.52
8/10
Confidence
81%
Reports
1,008
Location
US
US
74.82.47.4
8/10
Confidence
81%
Reports
913
Location
US
US
167.94.146.55
8/10
Confidence
81%
Reports
900
Location
US
US
184.105.139.70
8/10
Confidence
81%
Reports
883
Location
US
US
167.94.146.50
8/10
Confidence
81%
Reports
851
Location
US
US
23.94.112.131
8/10
Confidence
81%
Reports
831
Location
US
US
77.90.185.17
10/10
Confidence
81%
Reports
655
Location
DE
DE
195.178.110.15
8/10
Confidence
81%
Reports
533
Location
BG
BG
130.12.180.117
8/10
Confidence
81%
Reports
474
Location
US
US
71.6.199.23
8/10
Confidence
81%
Reports
471
Location
US
US
122.180.21.11
8/10
Confidence
81%
Reports
440
Location
IN
IN