KZ (KZ) Threat Intelligence

KZ

KZ has 4,678 malicious IP addresses with 192,980 abuse reports. Top threat categories include ssh bruteforce, botnet c2, generic bruteforce, web attack, web scanner. Top attacking networks: JSC Kazakhtelecom (1,608 IPs), Nls Astana Llp (542 IPs), Kar-Tel LLC (497 IPs). Data collected since 2023-01-20, last activity 2026-04-16.

Threat Assessment: KZ exhibits moderate cyber threat activity, with a notable number of malicious IPs across multiple attack categories. The dominant attack types are ssh bruteforce, botnet c2, generic bruteforce. The majority of threats originate from networks operated by JSC Kazakhtelecom and Nls Astana Llp.

Total Reports
192,980
Unique IPs
4,678
First Seen
2023-01-20
Last Activity
2026-04-16

Top Threat Categories

Ssh Bruteforce 217
Botnet C2 38
Generic Bruteforce 26
Web Attack 9
Web Scanner 2

Top Attacking Networks

AS9198 JSC Kazakhtelecom
1,608 IPs
AS205516 Nls Astana Llp
542 IPs
AS21299 Kar-Tel LLC
497 IPs

Most Reported IPs in KZ

212.154.234.9 271 reports
95.58.255.251 258 reports
89.218.69.66 257 reports
185.233.3.95 256 reports
91.147.92.31 223 reports

Access this data via API

Get KZ threat intelligence programmatically.

curl https://ip.wayscloud.services/api/country/KZ

View full API documentation

See how we classify and verify threats →

Check any IP from KZ

Look up threat intelligence for a specific IP address.

Related: Country Threat Ranking Country Risk Trends → Top Malicious IPs → AS9198 Intelligence AS205516 Intelligence AS21299 Intelligence Global Attack Trends Detect Malicious Traffic

Loading threat intelligence data...