Extreme Threat
IP 212.9.227.249 classified at threat level 10/10 with 12 documented attacks.
Advanced threat indicators confirmed with 89% certainty.
More threatening than 100% of monitored IPs
IP Address
212.9.227.249
IPv4
Public
UA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Ukraine
Location
Private Joint-stock Compa...
ASN 6703
12
Reports
Honeypot
Data Source
Threat Categories
Hacking
12
SSH
10
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
1. October 2026
Last Activity
2. October 2026
Recent (7 days)
12 incidents
Reputable Network
This IP is hosted on a network (ASN 6703) with generally good reputation. The ISP Private Joint-stock Company farlep-invest maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
89%
Verified
Confidence History
1. Oct 2026 - 2. Oct 2026
89%
Current
Stable
Trend
Security Reports (12)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 212.9.227.249
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
UA
- ASN
- AS6703
- ISP
- Private Joint-stock Company farlep-invest
DNS Information
- Reverse DNS
- mail.scm-website.info
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 12
- First Reported
- 1 Oct 2026
- Last Reported
- 2 Oct 2026, 09:25
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS6703
Private Joint-stock Company farlep-invest
UA
Network Threat Assessment
0/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
2
Total IPs Monitored
6
Total Reports
3
Reports per IP
Network Context
This IP address belongs to Private Joint-stock Company farlep-invest (AS6703), which manages 2 IP addresses in our monitoring system. Out of these, 6 have been reported for suspicious activities, resulting in a network-wide threat level of 0/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 831,747 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
12
avg: 9
+
Network Comparison
Compared against 3 IPs in ASN 6703
Threat Level
10/10
network avg: 8.7
+
Total Reports
12
network avg: 6
++
Network Private Joint-stock Company farlep-invest has overall threat level 0/10
Geographic Comparison
Compared against 6,896 IPs in UA
Threat Level
10/10
country avg: 5.8
++
Total Reports
12
country avg: 19
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
2 Oct 2026
9 reports
Daily Average
0.4
reports/day
Most Active
Friday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
12
SSH
10
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
756,123 threat incidents tracked globally • Last 24h: 28,952 Logs
FEED
Top Threat Sources
-
01
United States147,910 19.6% -
02
Brazil111,783 14.8%
-
03
India87,068 11.5%
-
04
China46,034 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,333 2.4%
-
07
Netherlands17,955 2.4%
-
08
Pakistan17,776 2.4%
-
09
Argentina16,264 2.2%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
8/10
Avg Threat
1%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.208.194.40
10/10
Confidence
100%
Reports
57
ISP
Art-master LLC
93.183.214.86
10/10
Confidence
100%
Reports
31
ISP
Private Joint S...
85.114.220.165
8/10
Confidence
98%
Reports
12
ISP
Freenet Jsc
91.236.224.37
10/10
Confidence
96%
Reports
114
ISP
Gigacloud LLC
194.0.89.139
10/10
Confidence
96%
Reports
74
ISP
Synapse Network...
46.164.148.190
10/10
Confidence
96%
Reports
64
ISP
Private Joint S...
91.207.54.182
10/10
Confidence
96%
Reports
63
ISP
OLIMP-KONSALT Ltd
195.216.211.122
10/10
Confidence
96%
Reports
60
ISP
Regional Online...
185.187.81.74
10/10
Confidence
96%
Reports
59
ISP
LLC id Strategy
185.250.21.217
10/10
Confidence
96%
Reports
39
ISP
Gigacloud LLC
87.76.190.253
10/10
Confidence
94%
Reports
49
ISP
ASMBP LLC
87.76.190.43
10/10
Confidence
94%
Reports
47
ISP
ASMBP LLC
217.147.172.167
10/10
Confidence
94%
Reports
46
ISP
Onehostplanet s...
87.76.190.59
10/10
Confidence
94%
Reports
45
ISP
ASMBP LLC
87.76.190.57
10/10
Confidence
94%
Reports
44
ISP
ASMBP LLC
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
89%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
169.197.183.27
10/10
Confidence
89%
Reports
12
Location
US
US
161.132.132.89
10/10
Confidence
89%
Reports
12
Location
PE
PE
180.243.2.3
10/10
Confidence
89%
Reports
10
Location
ID
ID
163.172.66.206
10/10
Confidence
89%
Reports
11
Location
FR
FR
167.172.64.200
10/10
Confidence
89%
Reports
11
Location
SG
SG
139.59.234.78
10/10
Confidence
89%
Reports
11
Location
SG
SG
121.133.167.161
10/10
Confidence
89%
Reports
11
Location
KR
KR
125.253.123.34
10/10
Confidence
89%
Reports
11
Location
VN
VN
125.229.194.81
10/10
Confidence
89%
Reports
11
Location
TW
TW
203.145.165.2
10/10
Confidence
89%
Reports
11
Location
IN
IN
195.228.79.114
10/10
Confidence
89%
Reports
11
Location
HU
HU
220.80.103.232
10/10
Confidence
89%
Reports
11
Location
KR
KR
216.244.94.253
10/10
Confidence
89%
Reports
11
Location
ID
ID
175.209.156.146
10/10
Confidence
89%
Reports
11
Location
KR
KR
181.49.149.174
10/10
Confidence
89%
Reports
11
Location
CO
CO