Critical Alert
Security alert: 197.220.93.100 rated 10/10 based on 108 verified incidents.
Threat profile indicates sustained malicious activity with 0% confidence rating.
More threatening than 90% of monitored IPs
IP Address
197.220.93.100
IPv4
Public
SO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
SO
Location
HORMUUD
ASN 37371
108
Reports
Mixed
Data Source
Threat Categories
Web App Attack
26
Hacking
2
IoT Targeted
2
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Moderate Network Risk
The network hosting this IP (ASN 37371, operated by HORMUUD) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
0%
Unverified
Confidence History
18. Aug 2025 - 24. Jan 2026
0%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| IoT Targeted | Community | 75% | |
| IoT Targeted | Community | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 197.220.93.100
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
SO
- ASN
- AS37371
- ISP
- HORMUUD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 108
- First Reported
- 18 Aug 2025
- Last Reported
- 24 Jan 2026, 08:25
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37371
HORMUUD
SO
Network Threat Assessment
5/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
4
Total IPs Monitored
114
Total Reports
28.5
Reports per IP
Network Context
This IP address belongs to HORMUUD (AS37371), which manages 4 IP addresses in our monitoring system. Out of these, 114 have been reported for suspicious activities, resulting in a network-wide threat level of 5/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,725 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
108
avg: 9
++
Network Comparison
Compared against 19 IPs in ASN 37371
Threat Level
10/10
network avg: 6.4
++
Total Reports
108
network avg: 9
++
Network HORMUUD has overall threat level 5/10
Geographic Comparison
Compared against 50 IPs in SO
Threat Level
10/10
country avg: 6.0
++
Total Reports
108
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
90 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
104
IoT Targeted
2
Hacking
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 28 reports
Weekly Activity
Geographic Threat Distribution
757,021 threat incidents tracked globally • Last 24h: 29,915 Logs
FEED
Top Threat Sources
-
01
United States148,159 19.6% -
02
Brazil111,851 14.8%
-
03
India87,178 11.5%
-
04
China46,071 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,386 2.4%
-
07
Netherlands17,983 2.4%
-
08
Pakistan17,811 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
18
Related IPs
6.2/10
Avg Threat
18%
Avg Confidence
6
High Threat
Elevated risk: Multiple related IPs are flagged
197.220.92.185
10/10
Confidence
91%
Reports
28
Location
SO
SO
192.145.173.88
7/10
Confidence
26%
Reports
1
Location
SO
SO
41.78.74.209
8/10
Confidence
24%
Reports
9
Location
SO
SO
192.145.175.151
6/10
Confidence
23%
Reports
1
Location
SO
SO
192.145.175.206
6/10
Confidence
23%
Reports
1
Location
SO
SO
192.145.175.86
6/10
Confidence
22%
Reports
1
Location
SO
SO
192.145.174.170
5/10
Confidence
13%
Reports
1
Location
SO
SO
192.145.175.198
5/10
Confidence
13%
Reports
1
Location
SO
SO
192.145.168.56
5/10
Confidence
13%
Reports
1
Location
SO
SO
192.145.175.101
5/10
Confidence
13%
Reports
1
Location
SO
SO
197.220.93.32
5/10
Confidence
13%
Reports
1
Location
SO
SO
192.145.168.73
5/10
Confidence
13%
Reports
1
Location
SO
SO
192.145.170.80
5/10
Confidence
13%
Reports
1
Location
SO
SO
192.145.170.103
5/10
Confidence
13%
Reports
1
Location
SO
SO
197.220.93.115
8/10
Confidence
4%
Reports
3
Location
SO
SO
197.220.93.117
6/10
Confidence
4%
Reports
1
Location
SO
SO
192.145.169.59
7/10
Confidence
1%
Reports
2
Location
SO
SO
41.78.74.37
7/10
Confidence
1%
Reports
1
Location
SO
SO
IPs from the same subnet range, likely same network segment.
3
Related IPs
6.3/10
Avg Threat
7%
Avg Confidence
1
High Threat
Elevated risk: Multiple related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
6.7/10
Avg Threat
33%
Avg Confidence
6
High Threat
Elevated risk: Multiple related IPs are flagged
197.220.92.185
10/10
Confidence
91%
Reports
28
ISP
Hormuud Telecom...
41.223.109.134
8/10
Confidence
78%
Reports
48
ISP
Golis-Telecom-AS
154.115.211.8
8/10
Confidence
56%
Reports
6
ISP
Telesom
102.128.132.6
10/10
Confidence
49%
Reports
3
ISP
SOMTEL INTERNAT...
192.145.173.88
7/10
Confidence
26%
Reports
1
ISP
Hormuud Telecom...
41.78.74.209
8/10
Confidence
24%
Reports
9
ISP
Hormuud Telecom...
197.231.202.201
6/10
Confidence
24%
Reports
2
ISP
SOMTEL
154.115.211.111
6/10
Confidence
23%
Reports
1
ISP
Telesom
192.145.175.151
6/10
Confidence
23%
Reports
1
ISP
Hormuud Telecom...
192.145.175.206
6/10
Confidence
23%
Reports
1
ISP
Hormuud Telecom...
192.145.175.86
6/10
Confidence
22%
Reports
1
ISP
Hormuud Telecom...
41.79.197.219
5/10
Confidence
13%
Reports
1
ISP
SomCable
102.218.59.65
5/10
Confidence
13%
Reports
1
ISP
SO! Limited
102.223.189.243
5/10
Confidence
13%
Reports
1
ISP
Golis Telecom S...
102.218.10.7
5/10
Confidence
13%
Reports
1
ISP
Bluecom Ltd