Elevated Risk
Elevated threat level 7/10 for IP 185.189.44.207 from 3 reported incidents.
Behavioral profile indicates cyber threat activity with 42% confidence.
More threatening than 86% of monitored IPs
IP Address
185.189.44.207
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Sweden
Location
UAB Cherry Servers
ASN 214159
3
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
3
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
15. October 2026
Last Activity
15. October 2026
Recent (7 days)
3 incidents
High-Risk Network Association
This IP belongs to a network (ASN 214159) with elevated threat levels. The ISP UAB Cherry Servers hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
1/10
Very Low
Confidence Score
42%
Medium Confidence
Confidence History
15. Oct 2026
42%
Current
Stable
Trend
Security Reports (3)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.189.44.207
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
SE
- ASN
- AS214159
- ISP
- UAB Cherry Servers
DNS Information
- Reverse DNS
- ip-185-189-44-207.006.ptr.cherryservers.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 3
- First Reported
- 15 Oct 2026
- Last Reported
- 15 Oct 2026, 17:43
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS214159
UAB Cherry Servers
SE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
2
Total Reports
2
Reports per IP
Network Context
This IP address belongs to UAB Cherry Servers (AS214159), which manages 1 IP addresses in our monitoring system. Out of these, 2 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
86
%
Global Threat Ranking
This IP is more threatening than 86% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,023,464 reported IPs worldwide
Threat Level
7/10
avg: 6.2
=
Total Reports
3
avg: 8
--
Network Comparison
Compared against 13 IPs in ASN 214159
Threat Level
7/10
network avg: 7.3
=
Total Reports
3
network avg: 14
--
Network UAB Cherry Servers has overall threat level 10/10
Geographic Comparison
Compared against 3,376 IPs in SE
Threat Level
7/10
country avg: 6.3
=
Total Reports
3
country avg: 11
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
15 Oct 2026
3 reports
Daily Average
0.1
reports/day
Most Active
Thursday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
932,139 threat incidents tracked globally • Last 24h: 203,372 Logs
FEED
Top Threat Sources
-
01
United States182,543 19.6% -
02
Brazil164,041 17.6%
-
03
India94,495 10.1%
-
04
China47,802 5.1%
-
05
SC29,342 3.1%
-
06
Argentina25,762 2.8%
-
07
Germany20,124 2.2%
-
08
Pakistan19,438 2.1%
-
09
Netherlands18,845 2%
-
10
Colombia18,655 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
12
Related IPs
7.3/10
Avg Threat
34%
Avg Confidence
8
High Threat
High-risk network: Majority of related IPs are flagged
84.32.49.219
7/10
Confidence
87%
Reports
20
Location
SE
SE
84.32.50.30
8/10
Confidence
65%
Reports
125
Location
SE
SE
185.189.46.75
10/10
Confidence
64%
Reports
6
Location
SE
SE
84.32.49.86
6/10
Confidence
39%
Reports
2
Location
SE
SE
84.32.49.91
7/10
Confidence
34%
Reports
10
Location
SE
SE
185.189.44.221
7/10
Confidence
25%
Reports
1
Location
SE
SE
185.189.45.230
10/10
Confidence
24%
Reports
3
Location
SE
SE
88.216.223.4
6/10
Confidence
23%
Reports
1
Location
SE
SE
185.189.45.10
10/10
Confidence
15%
Reports
5
Location
SE
SE
185.189.45.146
5/10
Confidence
13%
Reports
1
Location
SE
SE
185.189.46.67
5/10
Confidence
13%
Reports
1
Location
SE
SE
185.189.44.141
7/10
Confidence
1%
Reports
2
Location
SE
SE
IPs from the same subnet range, likely same network segment.
2
Related IPs
7/10
Avg Threat
13%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.217.0.192
10/10
Confidence
94%
Reports
41
ISP
w1n ltd
172.160.227.37
10/10
Confidence
93%
Reports
17
ISP
Microsoft Corpo...
94.254.118.199
10/10
Confidence
93%
Reports
11
ISP
Bahnhof AB
213.102.87.128
8/10
Confidence
90%
Reports
15
ISP
Tele2 SWIPnet
90.233.222.185
8/10
Confidence
89%
Reports
15
ISP
Telia Company AB
171.25.158.87
10/10
Confidence
88%
Reports
27
ISP
Patrik Lagerman
85.224.251.162
10/10
Confidence
88%
Reports
24
ISP
Telenor Sverige AB
84.32.49.219
7/10
Confidence
87%
Reports
20
ISP
UAB Cherry Servers
170.62.100.121
8/10
Confidence
87%
Reports
9
ISP
Datacamp Limited
195.178.191.5
10/10
Confidence
83%
Reports
235
ISP
Bahnhof AB
170.62.100.156
8/10
Confidence
83%
Reports
11
ISP
Datacamp Limited
171.25.158.47
10/10
Confidence
82%
Reports
325
ISP
Patrik Lagerman
194.76.113.51
10/10
Confidence
82%
Reports
228
ISP
Datacamp Limited
171.25.158.74
10/10
Confidence
82%
Reports
146
ISP
Patrik Lagerman
185.246.128.133
10/10
Confidence
78%
Reports
12,954
ISP
w1n ltd
IPs with similar threat level and confidence scores.
15
Related IPs
6/10
Avg Threat
42%
Avg Confidence
109.174.145.164
6/10
Confidence
42%
Reports
3
Location
GB
GB
92.118.12.201
6/10
Confidence
42%
Reports
3
104.165.197.197
6/10
Confidence
42%
Reports
3
87.83.122.69
6/10
Confidence
42%
Reports
3
209.73.131.124
6/10
Confidence
42%
Reports
3
82.26.226.228
6/10
Confidence
42%
Reports
3
167.148.214.160
6/10
Confidence
42%
Reports
3
Location
DE
DE
212.222.168.39
6/10
Confidence
42%
Reports
3
Location
FR
FR
93.152.47.237
6/10
Confidence
42%
Reports
3
Location
US
US
104.165.230.1
6/10
Confidence
42%
Reports
3
Location
US
US
45.10.233.178
6/10
Confidence
42%
Reports
3
Location
JP
JP
152.232.240.79
6/10
Confidence
42%
Reports
3
Location
US
US
109.174.150.92
6/10
Confidence
42%
Reports
3
Location
GB
GB
195.81.76.37
6/10
Confidence
42%
Reports
3
Location
US
US
45.38.91.232
6/10
Confidence
42%
Reports
3
Location
US
US