Critical Alert
Security alert: 77.22.70.198 rated 10/10 based on 11 verified incidents.
Threat profile indicates sustained malicious activity with 50% confidence rating.
More threatening than 98% of monitored IPs
IP Address
77.22.70.198
IPv4
Public
DE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Germany
Location
Vodafone GmbH
ASN 3209
11
Reports
Honeypot
Data Source
Threat Categories
SSH
11
Brute-Force
10
Hacking
1
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
12. September 2026
Last Activity
12. September 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 3209, operated by Vodafone GmbH) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
50%
Medium Confidence
Confidence History
5. Jun 2026 - 12. Sep 2026
50%
Current
Stable
Trend
Security Reports (11)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH Exploited Host | Honeypot x3 | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% | |
| Brute-Force SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 77.22.70.198
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
DE
- ASN
- AS3209
- ISP
- Vodafone GmbH
DNS Information
- Reverse DNS
- ip-077-022-070-198.vkd68.pools.vodafone-ip.de
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 11
- First Reported
- 5 Jun 2026
- Last Reported
- 12 Sep 2026, 07:23
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS3209
Vodafone GmbH
DE
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
55
Total IPs Monitored
635
Total Reports
11.5
Reports per IP
Network Context
This IP address belongs to Vodafone GmbH (AS3209), which manages 55 IP addresses in our monitoring system. Out of these, 635 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 805,467 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
11
avg: 9
+
Network Comparison
Compared against 877 IPs in ASN 3209
Threat Level
10/10
network avg: 6.5
++
Total Reports
11
network avg: 3
++
Network Vodafone GmbH has overall threat level 4/10
Geographic Comparison
Compared against 17,413 IPs in DE
Threat Level
10/10
country avg: 7.3
+
Total Reports
11
country avg: 31
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
12 Sep 2026
1 reports
Daily Average
0
reports/day
Most Active
Saturday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
11
Brute-Force
10
Hacking
1
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
732,564 threat incidents tracked globally • Last 24h: 28,865 Logs
FEED
Top Threat Sources
-
01
United States143,097 19.5% -
02
Brazil110,689 15.1%
-
03
India82,024 11.2%
-
04
China44,688 6.1%
-
05
SC29,232 4%
-
06
Netherlands17,444 2.4%
-
07
Germany17,413 2.4%
-
08
Pakistan16,575 2.3%
-
09
Argentina16,184 2.2%
-
10
Colombia15,130 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
72%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
5.146.111.129
8/10
Confidence
97%
Reports
29
Location
DE
DE
78.94.185.253
10/10
Confidence
96%
Reports
14
Location
DE
DE
2a02:8071:2281:8240:7b8f:4890:5852:7ff5
8/10
Confidence
95%
Reports
15
Location
DE
DE
77.25.37.44
10/10
Confidence
94%
Reports
165
Location
DE
DE
85.216.81.75
10/10
Confidence
88%
Reports
14
Location
DE
DE
109.91.4.177
10/10
Confidence
86%
Reports
167
Location
DE
DE
178.27.90.142
10/10
Confidence
84%
Reports
140
Location
DE
DE
95.90.13.168
10/10
Confidence
83%
Reports
199
Location
DE
DE
92.208.103.81
8/10
Confidence
79%
Reports
8
Location
DE
DE
92.208.231.194
8/10
Confidence
73%
Reports
7
Location
DE
DE
92.218.123.85
8/10
Confidence
72%
Reports
12
Location
DE
DE
2a02:8071:2281:8240:246e:aaf6:b8e8:4951
8/10
Confidence
67%
Reports
4
Location
DE
DE
92.208.239.80
10/10
Confidence
59%
Reports
4
Location
DE
DE
92.208.239.49
8/10
Confidence
59%
Reports
4
Location
DE
DE
2a02:908:196:260:10ea:859:ee41:dc9e
8/10
Confidence
59%
Reports
4
Location
DE
DE
95.89.149.179
10/10
Confidence
56%
Reports
128
Location
DE
DE
37.5.254.140
10/10
Confidence
54%
Reports
6
Location
DE
DE
2a00:1e:ab01:1101:492c:319:81e9:343c
10/10
Confidence
50%
Reports
4
Location
DE
DE
178.203.96.188
10/10
Confidence
45%
Reports
5
Location
DE
DE
92.209.217.219
10/10
Confidence
40%
Reports
3
Location
DE
DE
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
213.209.159.208
10/10
Confidence
100%
Reports
798
ISP
Feo Prest SRL
136.92.16.48
8/10
Confidence
100%
Reports
231
ISP
Google LLC
136.92.26.87
10/10
Confidence
100%
Reports
96
ISP
Google LLC
62.80.98.102
10/10
Confidence
100%
Reports
53
ISP
euNetworks GmbH
2a0f:ca80:b00b:28d8::5
8/10
Confidence
100%
Reports
38
ISP
TechTies Inc.
2a03:4000:0:5d0:74dd:98ff:fe39:40cd
8/10
Confidence
100%
Reports
26
ISP
netcup GmbH
5.175.206.193
8/10
Confidence
100%
Reports
19
ISP
AltunHOST LTD
213.165.52.39
10/10
Confidence
100%
Reports
14
ISP
Chsl One Ltd
138.201.205.59
8/10
Confidence
99%
Reports
17
ISP
Hetzner Online ...
4.185.40.215
8/10
Confidence
99%
Reports
16
ISP
Microsoft Corpo...
94.26.106.214
10/10
Confidence
99%
Reports
11
ISP
TechTies Inc.
136.92.13.138
10/10
Confidence
99%
Reports
10
ISP
Google LLC
2a01:239:265:2100::1
8/10
Confidence
98%
Reports
30
ISP
IONOS SE
194.25.171.99
10/10
Confidence
98%
Reports
20
ISP
Deutsche Teleko...
136.92.29.89
8/10
Confidence
98%
Reports
14
ISP
Google LLC
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
50%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
208.3.195.65
8/10
Confidence
50%
Reports
1,340
Location
US
US
64.89.160.242
5/10
Confidence
50%
Reports
1,034
Location
US
US
95.215.0.144
8/10
Confidence
50%
Reports
996
Location
RU
RU
192.227.241.218
8/10
Confidence
50%
Reports
605
Location
US
US
152.53.111.131
8/10
Confidence
50%
Reports
349
Location
AT
AT
20.153.140.50
8/10
Confidence
50%
Reports
303
Location
SG
SG
152.32.156.50
8/10
Confidence
50%
Reports
298
Location
IN
IN
5.63.13.124
8/10
Confidence
50%
Reports
283
Location
IR
IR
62.210.185.4
8/10
Confidence
50%
Reports
205
Location
FR
FR
185.177.72.22
8/10
Confidence
50%
Reports
171
Location
FR
FR
80.87.206.19
10/10
Confidence
50%
Reports
168
Location
RU
RU
106.246.224.219
10/10
Confidence
50%
Reports
160
Location
KR
KR
199.45.155.82
10/10
Confidence
50%
Reports
132
Location
US
US
91.224.92.32
8/10
Confidence
50%
Reports
131
Location
GB
GB
103.148.100.146
10/10
Confidence
50%
Reports
122
Location
ID
ID