Notable Threat
IP 212.156.246.158 rated 8/10 from 67 verified reports.
Multiple security incidents attributed to this IP. Confidence: 86%.
More threatening than 84% of monitored IPs
IP Address
212.156.246.158
IPv4
Public
TR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Türkiye
Location
Turk Telekom
ASN 9121
67
Reports
Mixed
Data Source
Threat Categories
WP Login Brute Force
15
Brute-Force
14
Port Scan
2
Hacking
2
WP XML-RPC Brute Force
2
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
8. July 2026
Last Activity
6. August 2026
Recent (7 days)
5 incidents
Moderate Network Risk
The network hosting this IP (ASN 9121, operated by Turk Telekom) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
86%
Verified
Confidence History
23. Jun 2026 - 6. Aug 2026
86%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | WP Login Brute Force | Honeypot | 75% |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 212.156.246.158
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
TR
- ASN
- AS9121
- ISP
- Turk Telekom
DNS Information
- Reverse DNS
- 212.156.246.158.static.turktelekom.com.tr
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 67
- First Reported
- 27 Apr 2026
- Last Reported
- 6 Aug 2026, 04:17
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS9121
Turk Telekom
TR
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
325
Total IPs Monitored
1,334
Total Reports
4.1
Reports per IP
Network Context
This IP address belongs to Turk Telekom (AS9121), which manages 325 IP addresses in our monitoring system. Out of these, 1,334 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 312,359 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
67
avg: 18
++
Network Comparison
Compared against 576 IPs in ASN 9121
Threat Level
8/10
network avg: 5.9
+
Total Reports
67
network avg: 7
++
Network Turk Telekom has overall threat level 4/10
Geographic Comparison
Compared against 2,014 IPs in TR
Threat Level
8/10
country avg: 6.1
+
Total Reports
67
country avg: 13
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
8 Jul 2026
3 reports
Daily Average
0.6
reports/day
Most Active
Monday
11 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
39
WP Login Brute Force
27
Port Scan
2
Hacking
2
WP XML-RPC Brute Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.4/10
Avg Threat
90%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
212.174.120.226
10/10
Confidence
100%
Reports
17
Location
TR
TR
85.111.31.200
10/10
Confidence
98%
Reports
20
Location
TR
TR
78.188.213.8
10/10
Confidence
94%
Reports
1,293
Location
TR
TR
88.247.46.102
10/10
Confidence
94%
Reports
474
Location
TR
TR
81.215.13.133
10/10
Confidence
94%
Reports
253
Location
TR
TR
78.189.162.27
10/10
Confidence
94%
Reports
82
Location
TR
TR
85.105.208.201
10/10
Confidence
94%
Reports
38
Location
TR
TR
78.189.54.20
10/10
Confidence
94%
Reports
35
Location
TR
TR
85.100.120.193
10/10
Confidence
94%
Reports
25
Location
TR
TR
95.0.206.165
10/10
Confidence
94%
Reports
21
Location
TR
TR
78.187.121.49
10/10
Confidence
94%
Reports
20
Location
TR
TR
88.255.140.164
8/10
Confidence
93%
Reports
24
Location
TR
TR
88.234.81.237
8/10
Confidence
93%
Reports
13
Location
TR
TR
85.105.56.108
8/10
Confidence
92%
Reports
21
Location
TR
TR
95.3.76.162
10/10
Confidence
89%
Reports
12
Location
TR
TR
212.156.59.222
8/10
Confidence
82%
Reports
14
Location
TR
TR
78.180.151.146
10/10
Confidence
81%
Reports
19
Location
TR
TR
78.188.115.67
8/10
Confidence
77%
Reports
11
Location
TR
TR
88.235.61.67
8/10
Confidence
76%
Reports
10
Location
TR
TR
78.187.21.105
10/10
Confidence
75%
Reports
72
Location
TR
TR
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.128.70.19
8/10
Confidence
100%
Reports
168
ISP
Euronet Telekom...
195.142.108.235
8/10
Confidence
100%
Reports
88
ISP
Euronet Telekom...
92.249.63.60
8/10
Confidence
100%
Reports
72
ISP
Teknosos Bilisi...
46.20.146.46
10/10
Confidence
100%
Reports
68
ISP
Dorabase Veri M...
195.33.205.242
10/10
Confidence
100%
Reports
58
ISP
Superonline Ile...
89.252.131.17
10/10
Confidence
100%
Reports
27
ISP
Netinternet Bil...
193.164.5.58
10/10
Confidence
100%
Reports
21
ISP
Pembe Gul Isguz...
212.174.120.226
10/10
Confidence
100%
Reports
17
ISP
Turk Telekom
45.158.14.124
10/10
Confidence
100%
Reports
13
ISP
HostLAB Bilisim...
176.53.159.38
10/10
Confidence
99%
Reports
27
ISP
ZORNTECH WEB SO...
89.144.10.227
8/10
Confidence
99%
Reports
20
ISP
AltunHOST LTD
213.238.171.88
8/10
Confidence
99%
Reports
17
ISP
VG Telekomunika...
176.53.159.197
10/10
Confidence
98%
Reports
57
ISP
ZORNTECH WEB SO...
176.53.159.198
10/10
Confidence
98%
Reports
35
ISP
ZORNTECH WEB SO...
46.29.26.195
10/10
Confidence
98%
Reports
24
ISP
M/S ROBI TRADERS
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
95.214.52.233
10/10
Confidence
86%
Reports
3,597
Location
PL
PL
179.43.139.58
10/10
Confidence
86%
Reports
3,510
Location
CH
CH
5.61.209.224
10/10
Confidence
86%
Reports
3,035
Location
SC
SC
165.227.110.45
8/10
Confidence
86%
Reports
2,530
Location
US
US
165.227.188.42
8/10
Confidence
86%
Reports
2,529
Location
US
US
152.32.189.128
8/10
Confidence
86%
Reports
2,420
Location
HK
HK
152.32.189.121
10/10
Confidence
86%
Reports
2,383
Location
HK
HK
152.32.172.108
8/10
Confidence
86%
Reports
2,380
Location
HK
HK
137.184.112.103
8/10
Confidence
86%
Reports
2,366
Location
US
US
128.1.132.220
10/10
Confidence
86%
Reports
2,325
Location
HK
HK
155.138.210.119
10/10
Confidence
86%
Reports
1,539
Location
US
US
106.75.137.178
10/10
Confidence
86%
Reports
1,234
Location
CN
CN
2.57.122.96
10/10
Confidence
86%
Reports
1,017
Location
RO
RO
106.75.188.200
10/10
Confidence
86%
Reports
978
Location
CN
CN
103.56.148.184
10/10
Confidence
86%
Reports
918
Location
ID
ID