Significant Threat
IP 84.32.49.91 identified as significant threat (7/10) from 10 events.
Multiple malicious indicators detected. Confidence level: 63%.
More threatening than 84% of monitored IPs
IP Address
84.32.49.91
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Sweden
Location
UAB Cherry Servers
ASN 214159
10
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
10
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
11. September 2026
Last Activity
11. September 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 214159) with elevated threat levels. The ISP UAB Cherry Servers hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
1/10
Very Low
Confidence Score
63%
High Confidence
Confidence History
11. Sep 2026
63%
Current
Stable
Trend
Security Reports (10)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 84.32.49.91
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
SE
- ASN
- AS214159
- ISP
- UAB Cherry Servers
DNS Information
- Reverse DNS
- ip-84-32-49-91.002.ptr.cherryservers.net
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 10
- First Reported
- 11 Sep 2026
- Last Reported
- 11 Sep 2026, 17:29
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS214159
UAB Cherry Servers
SE
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
2
Total Reports
2
Reports per IP
Network Context
This IP address belongs to UAB Cherry Servers (AS214159), which manages 1 IP addresses in our monitoring system. Out of these, 2 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 806,592 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
10
avg: 9
=
Network Comparison
Compared against 10 IPs in ASN 214159
Threat Level
7/10
network avg: 7.5
=
Total Reports
10
network avg: 15
-
Network UAB Cherry Servers has overall threat level 10/10
Geographic Comparison
Compared against 2,657 IPs in SE
Threat Level
7/10
country avg: 6.5
=
Total Reports
10
country avg: 12
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 Sep 2026
10 reports
Daily Average
0.3
reports/day
Most Active
Friday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
10
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
733,504 threat incidents tracked globally • Last 24h: 28,676 Logs
FEED
Top Threat Sources
-
01
United States143,262 19.5% -
02
Brazil110,751 15.1%
-
03
India82,121 11.2%
-
04
China44,763 6.1%
-
05
SC29,233 4%
-
06
Germany17,490 2.4%
-
07
Netherlands17,472 2.4%
-
08
Pakistan16,640 2.3%
-
09
Argentina16,189 2.2%
-
10
Colombia15,134 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
9
Related IPs
7.6/10
Avg Threat
27%
Avg Confidence
6
High Threat
High-risk network: Majority of related IPs are flagged
84.32.50.30
8/10
Confidence
92%
Reports
125
Location
SE
SE
185.189.46.75
10/10
Confidence
59%
Reports
4
Location
SE
SE
185.189.45.230
10/10
Confidence
30%
Reports
3
Location
SE
SE
88.216.223.4
6/10
Confidence
23%
Reports
1
Location
SE
SE
185.189.45.10
10/10
Confidence
15%
Reports
5
Location
SE
SE
185.189.45.146
5/10
Confidence
13%
Reports
1
Location
SE
SE
185.189.46.67
5/10
Confidence
13%
Reports
1
Location
SE
SE
185.189.44.141
7/10
Confidence
1%
Reports
2
Location
SE
SE
84.32.49.86
7/10
Confidence
1%
Reports
1
Location
SE
SE
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
1%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
85.224.251.162
10/10
Confidence
100%
Reports
20
ISP
Telenor Sverige AB
84.13.142.21
8/10
Confidence
97%
Reports
24
ISP
Oracle Corporation
172.160.227.37
10/10
Confidence
97%
Reports
16
ISP
Microsoft Corpo...
213.102.87.128
8/10
Confidence
96%
Reports
12
ISP
Tele2 SWIPnet
171.25.158.87
10/10
Confidence
95%
Reports
22
ISP
Patrik Lagerman
90.233.222.185
8/10
Confidence
95%
Reports
11
ISP
Telia Company AB
170.62.100.156
8/10
Confidence
95%
Reports
10
ISP
Datacamp Limited
45.198.224.16
10/10
Confidence
94%
Reports
100
ISP
Vpsvaulthost LTD
194.76.113.51
10/10
Confidence
93%
Reports
228
ISP
Datacamp Limited
84.32.50.30
8/10
Confidence
92%
Reports
125
ISP
UAB Cherry Servers
84.13.136.9
8/10
Confidence
91%
Reports
18
ISP
Oracle Corporation
84.13.153.129
8/10
Confidence
90%
Reports
18
ISP
Oracle Corporation
171.25.158.82
10/10
Confidence
86%
Reports
118
ISP
Patrik Lagerman
95.203.24.134
8/10
Confidence
86%
Reports
10
ISP
Telia Company AB
195.178.191.5
10/10
Confidence
85%
Reports
221
ISP
Bahnhof AB
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
63%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
93.152.208.42
10/10
Confidence
63%
Reports
1,915
Location
BG
BG
77.91.118.18
8/10
Confidence
63%
Reports
1,846
Location
RU
RU
77.91.71.91
8/10
Confidence
63%
Reports
1,297
Location
GE
GE
128.14.239.39
8/10
Confidence
63%
Reports
1,187
Location
US
US
118.193.68.150
8/10
Confidence
63%
Reports
983
Location
KR
KR
106.75.157.47
10/10
Confidence
63%
Reports
940
Location
CN
CN
216.126.239.150
8/10
Confidence
63%
Reports
829
Location
US
US
135.136.181.28
10/10
Confidence
63%
Reports
616
Location
AE
AE
152.32.181.210
8/10
Confidence
63%
Reports
325
Location
AE
AE
117.176.131.211
10/10
Confidence
63%
Reports
314
Location
CN
CN
101.36.114.209
8/10
Confidence
63%
Reports
292
Location
KR
KR
216.180.246.95
8/10
Confidence
63%
Reports
288
Location
US
US
220.132.16.39
10/10
Confidence
63%
Reports
273
Location
TW
TW
128.14.227.37
8/10
Confidence
63%
Reports
245
Location
TW
TW
118.193.59.41
8/10
Confidence
63%
Reports
243
Location
DE
DE