Extreme Threat
IP 197.221.232.44 classified at threat level 10/10 with 139 documented attacks.
Advanced threat indicators confirmed with 81% certainty.
More threatening than 98% of monitored IPs
IP Address
197.221.232.44
IPv4
Public
ZW
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
ZW
Location
TELONE
ASN 37204
139
Reports
Honeypot
Data Source
Threat Categories
SSH
26
Hacking
16
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Declining
Activity has decreased recently, suggesting remediation or threat actor migration.
First Observed
21. August 2026
Last Activity
28. August 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 37204) with generally good reputation. The ISP TELONE maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring the positive trend.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
7/10
High
Confidence Score
81%
Verified
Confidence History
23. May 2026 - 28. Aug 2026
81%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | SSH | Honeypot | 75% |
| New | SSH | Honeypot | 75% |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 197.221.232.44
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
ZW
- ASN
- AS37204
- ISP
- TELONE
DNS Information
- Reverse DNS
- 16.44.telone.co.zw
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 139
- First Reported
- 20 Feb 2026
- Last Reported
- 28 Aug 2026, 12:14
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37204
TELONE
ZW
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4
Total IPs Monitored
118
Total Reports
29.5
Reports per IP
Network Context
This IP address belongs to TELONE (AS37204), which manages 4 IP addresses in our monitoring system. Out of these, 118 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 631,919 reported IPs worldwide
Threat Level
10/10
avg: 5.7
++
Total Reports
139
avg: 10
++
Network Comparison
Compared against 64 IPs in ASN 37204
Threat Level
10/10
network avg: 6.5
++
Total Reports
139
network avg: 5
++
Network TELONE has overall threat level 2/10
Geographic Comparison
Compared against 493 IPs in ZW
Threat Level
10/10
country avg: 6.3
++
Total Reports
139
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
21 Aug 2026
10 reports
Daily Average
0.4
reports/day
Most Active
Friday
30 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
132
Hacking
34
Exploited Host
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 11 reports
Weekly Activity
Geographic Threat Distribution
547,472 threat incidents tracked globally • Last 24h: 77,074 Logs
FEED
Top Threat Sources
-
01
United States110,933 20.3% -
02
Brazil100,462 18.4%
-
03
India59,327 10.8%
-
04
China39,355 7.2%
-
05
Colombia14,083 2.6%
-
06
Argentina14,056 2.6%
-
07
Germany12,445 2.3%
-
08
Pakistan10,624 1.9%
-
09
Russia10,421 1.9%
-
10
Indonesia9,905 1.8%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.8/10
Avg Threat
55%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
197.221.254.99
8/10
Confidence
100%
Reports
13
Location
ZW
ZW
197.221.254.55
8/10
Confidence
78%
Reports
7
Location
ZW
ZW
197.221.254.11
8/10
Confidence
75%
Reports
6
Location
ZW
ZW
102.213.42.70
8/10
Confidence
68%
Reports
20
Location
ZW
ZW
197.221.244.34
8/10
Confidence
66%
Reports
13
Location
ZW
ZW
197.221.254.98
8/10
Confidence
61%
Reports
6
Location
ZW
ZW
197.221.232.187
8/10
Confidence
61%
Reports
6
Location
ZW
ZW
102.213.42.86
8/10
Confidence
58%
Reports
8
Location
ZW
ZW
197.221.254.53
8/10
Confidence
58%
Reports
5
Location
ZW
ZW
197.221.237.210
7/10
Confidence
57%
Reports
5
Location
ZW
ZW
197.221.254.58
8/10
Confidence
53%
Reports
3
Location
ZW
ZW
197.221.254.59
8/10
Confidence
49%
Reports
3
Location
ZW
ZW
102.213.42.47
8/10
Confidence
46%
Reports
3
Location
ZW
ZW
197.221.254.42
7/10
Confidence
40%
Reports
2
Location
ZW
ZW
102.213.43.155
7/10
Confidence
40%
Reports
2
Location
ZW
ZW
102.213.42.61
7/10
Confidence
40%
Reports
2
Location
ZW
ZW
102.213.42.59
7/10
Confidence
40%
Reports
2
Location
ZW
ZW
197.221.254.10
7/10
Confidence
39%
Reports
2
Location
ZW
ZW
102.213.42.5
7/10
Confidence
38%
Reports
2
Location
ZW
ZW
41.220.30.132
10/10
Confidence
34%
Reports
4
Location
ZW
ZW
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
61%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
41.174.88.145
10/10
Confidence
100%
Reports
15
ISP
Zimbabwe Online
197.221.254.99
8/10
Confidence
100%
Reports
13
ISP
Telone PVT Ltd
41.175.143.216
8/10
Confidence
95%
Reports
12
ISP
Zimbabwe Online
196.43.101.161
10/10
Confidence
94%
Reports
20
ISP
UTANDE
41.174.98.95
8/10
Confidence
92%
Reports
28
ISP
ZOL
41.174.94.210
8/10
Confidence
92%
Reports
13
ISP
Zimbabwe Online
41.174.111.231
10/10
Confidence
90%
Reports
36
ISP
ZOL
197.221.254.55
8/10
Confidence
78%
Reports
7
ISP
Telone PVT Ltd
41.174.67.128
8/10
Confidence
76%
Reports
7
ISP
Zimbabwe Online
197.221.254.11
8/10
Confidence
75%
Reports
6
ISP
Telone PVT Ltd
41.175.140.111
8/10
Confidence
75%
Reports
6
ISP
Zimbabwe Online
41.174.84.149
8/10
Confidence
73%
Reports
5
ISP
Zimbabwe Online
41.173.37.69
8/10
Confidence
73%
Reports
5
ISP
Zimbabwe Online
196.29.34.170
10/10
Confidence
71%
Reports
40
ISP
UTANDE
102.213.42.70
8/10
Confidence
68%
Reports
20
ISP
TELONE
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
81%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
146.190.153.30
8/10
Confidence
81%
Reports
10,914
Location
US
US
209.38.70.156
8/10
Confidence
81%
Reports
10,857
Location
US
US
24.199.126.56
8/10
Confidence
81%
Reports
10,826
Location
US
US
178.128.32.203
8/10
Confidence
81%
Reports
7,540
Location
GB
GB
176.65.149.220
10/10
Confidence
81%
Reports
6,377
Location
NL
NL
176.65.149.55
10/10
Confidence
81%
Reports
6,030
Location
NL
NL
79.124.59.78
10/10
Confidence
81%
Reports
5,392
Location
BG
BG
152.32.170.55
10/10
Confidence
81%
Reports
3,308
Location
HK
HK
80.94.92.71
10/10
Confidence
81%
Reports
1,724
Location
RO
RO
14.98.67.210
10/10
Confidence
81%
Reports
1,626
Location
IN
IN
62.171.176.188
10/10
Confidence
81%
Reports
1,561
Location
FR
FR
64.62.156.192
8/10
Confidence
81%
Reports
1,246
Location
US
US
130.12.180.65
10/10
Confidence
81%
Reports
1,240
Location
NL
NL
64.62.156.66
8/10
Confidence
81%
Reports
960
Location
US
US
207.90.244.17
8/10
Confidence
81%
Reports
953
Location
US
US
Analyzed high-risk IP addresses
- 51.68.207.118
- 185.246.128.133
- 66.132.172.175
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.162
- 66.132.172.167
- 66.132.172.174
- 66.132.172.172
- 66.132.172.161
- 66.132.172.168
- 66.132.172.173
- 66.132.172.171
- 66.132.172.170
- 66.132.172.166
- 66.132.172.169
- 66.132.172.163
- 193.32.162.28
- 80.94.92.183
- 176.65.148.84
- 207.90.244.11
- 85.215.239.226
- 46.151.178.13