Elevated Risk
Elevated threat level 8/10 for IP 9.154.222.189 from 32 reported incidents.
Behavioral profile indicates cyber threat activity with 83% confidence.
More threatening than 90% of monitored IPs
IP Address
9.154.222.189
IPv4
Public
ID
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Indonesia
Location
PT. Eka Mas Republik
ASN 63859
32
Reports
Mixed
Data Source
Threat Categories
Brute-Force
19
WP Login Brute Force
12
Web App Attack
9
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
4. September 2026
Last Activity
1. October 2026
Recent (7 days)
5 incidents
Reputable Network
This IP is hosted on a network (ASN 63859) with generally good reputation. The ISP PT. Eka Mas Republik maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
82%
Verified
Confidence History
27. Jun 2026 - 1. Oct 2026
83%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 9.154.222.189
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ID
- ASN
- AS63859
- ISP
- PT. Eka Mas Republik
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 32
- First Reported
- 25 Jun 2026
- Last Reported
- 1 Oct 2026, 08:02
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS63859
PT. Eka Mas Republik
ID
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
20
Total IPs Monitored
1,251
Total Reports
62.6
Reports per IP
Network Context
This IP address belongs to PT. Eka Mas Republik (AS63859), which manages 20 IP addresses in our monitoring system. Out of these, 1,251 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 813,912 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
32
avg: 9
++
Network Comparison
Compared against 729 IPs in ASN 63859
Threat Level
8/10
network avg: 6.6
+
Total Reports
32
network avg: 2
++
Network PT. Eka Mas Republik has overall threat level 1/10
Geographic Comparison
Compared against 14,407 IPs in ID
Threat Level
8/10
country avg: 6.9
+
Total Reports
32
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 Sep 2026
2 reports
Daily Average
0.4
reports/day
Most Active
Sunday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
21
WP Login Brute Force
12
Web App Attack
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 06:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
739,894 threat incidents tracked globally • Last 24h: 43,724 Logs
FEED
Top Threat Sources
-
01
United States144,631 19.5% -
02
Brazil111,075 15%
-
03
India83,427 11.3%
-
04
China45,176 6.1%
-
05
SC29,242 4%
-
06
Germany17,742 2.4%
-
07
Netherlands17,588 2.4%
-
08
Pakistan16,952 2.3%
-
09
Argentina16,214 2.2%
-
10
Colombia15,149 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
64%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
103.121.20.18
10/10
Confidence
100%
Reports
68
Location
ID
ID
2402:8780:1085:3879:a935:5825:7ca4:c23c
10/10
Confidence
84%
Reports
8
Location
ID
ID
202.152.201.166
10/10
Confidence
80%
Reports
158
Location
ID
ID
103.130.18.234
8/10
Confidence
75%
Reports
6
Location
ID
ID
103.130.18.76
8/10
Confidence
72%
Reports
6
Location
ID
ID
103.175.225.238
10/10
Confidence
68%
Reports
54
Location
ID
ID
2402:8780:1085:3879:6d84:2244:432d:2e31
8/10
Confidence
63%
Reports
5
Location
ID
ID
103.156.164.93
10/10
Confidence
62%
Reports
5
Location
ID
ID
103.130.167.198
8/10
Confidence
61%
Reports
9
Location
ID
ID
9.154.242.4
10/10
Confidence
61%
Reports
5
Location
ID
ID
2402:8780:1085:dbe1:cd39:ef0e:9b54:709f
10/10
Confidence
61%
Reports
4
Location
ID
ID
158.140.171.73
8/10
Confidence
60%
Reports
5
Location
ID
ID
158.140.167.100
10/10
Confidence
59%
Reports
8
Location
ID
ID
158.140.173.25
10/10
Confidence
56%
Reports
4
Location
ID
ID
45.198.148.2
8/10
Confidence
54%
Reports
5
Location
ID
ID
156.230.182.52
8/10
Confidence
53%
Reports
5
Location
ID
ID
103.171.159.187
10/10
Confidence
53%
Reports
4
Location
ID
ID
203.83.40.0
8/10
Confidence
52%
Reports
6
Location
ID
ID
103.47.134.22
8/10
Confidence
52%
Reports
5
Location
ID
ID
2402:8780:1077:afc0:7112:1fbb:65fc:fdc
10/10
Confidence
51%
Reports
3
Location
ID
ID
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
210.87.97.90
10/10
Confidence
100%
Reports
183
ISP
PT Solusi Data ...
103.154.81.166
10/10
Confidence
100%
Reports
132
ISP
PT Mora Telemat...
160.22.240.235
10/10
Confidence
100%
Reports
126
ISP
PT Seeplus Medi...
103.90.25.52
10/10
Confidence
100%
Reports
111
ISP
PT. Arana Tekno...
103.162.1.80
10/10
Confidence
100%
Reports
96
ISP
PT Satu Sistem ...
103.214.100.4
10/10
Confidence
100%
Reports
92
ISP
PT SURYA TEKNIK...
117.102.87.140
10/10
Confidence
100%
Reports
89
ISP
BIZNET NETWORKS
103.154.137.43
10/10
Confidence
100%
Reports
78
ISP
PT Mora Telemat...
103.79.90.26
10/10
Confidence
100%
Reports
76
ISP
PEMERINTAH KABU...
202.150.130.180
10/10
Confidence
100%
Reports
68
ISP
PT Comtronics S...
103.121.20.18
10/10
Confidence
100%
Reports
68
ISP
PT. Eka Mas Rep...
103.154.137.41
10/10
Confidence
100%
Reports
67
ISP
PT Mora Telemat...
103.162.69.11
10/10
Confidence
100%
Reports
64
ISP
Dinas Komunikas...
119.47.88.254
8/10
Confidence
100%
Reports
56
ISP
JAWA POS NATION...
103.154.179.154
10/10
Confidence
100%
Reports
53
ISP
PT Aneka Teguh ...
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
3.131.220.121
8/10
Confidence
83%
Reports
2,776
Location
US
US
167.94.146.51
8/10
Confidence
83%
Reports
1,070
Location
US
US
216.218.206.69
8/10
Confidence
83%
Reports
700
Location
US
US
185.193.240.246
10/10
Confidence
83%
Reports
572
Location
MK
MK
23.175.50.52
10/10
Confidence
83%
Reports
529
Location
US
US
204.76.203.7
8/10
Confidence
83%
Reports
509
Location
NL
NL
91.196.152.208
10/10
Confidence
83%
Reports
391
Location
FR
FR
91.196.152.177
10/10
Confidence
83%
Reports
375
Location
FR
FR
94.154.43.250
10/10
Confidence
83%
Reports
360
Location
NL
NL
171.25.158.47
10/10
Confidence
83%
Reports
309
Location
SE
SE
66.132.172.136
8/10
Confidence
83%
Reports
306
Location
US
US
195.184.76.236
10/10
Confidence
83%
Reports
305
Location
US
US
66.132.172.205
8/10
Confidence
83%
Reports
301
Location
US
US
62.60.130.227
8/10
Confidence
83%
Reports
289
Location
IR
IR
195.184.76.99
10/10
Confidence
83%
Reports
286
Location
US
US