Substantial Risk
Threat level 8/10 for 80.211.203.98 based on 25 documented incidents.
Consistent suspicious behavior patterns. 93% confidence rating.
More threatening than 81% of monitored IPs
IP Address
80.211.203.98
IPv4
Public
CZ
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
CZ
Location
INTERNET CZ, a.s.
ASN 24806
25
Reports
Honeypot
Data Source
Threat Categories
SSH
18
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
High-Risk Network Association
This IP belongs to a network (ASN 24806) with elevated threat levels. The ISP INTERNET CZ, a.s. hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
64%
High Confidence
Confidence History
27. Feb 2026 - 2. Mar 2026
93%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 80.211.203.98
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CZ
- ASN
- AS24806
- ISP
- INTERNET CZ, a.s.
DNS Information
- Reverse DNS
- ibeam.cz
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 25
- First Reported
- 27 Feb 2026
- Last Reported
- 2 Mar 2026, 15:11
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS24806
INTERNET CZ, a.s.
CZ
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
25
Total Reports
25
Reports per IP
Network Context
This IP address belongs to INTERNET CZ, a.s. (AS24806), which manages 1 IP addresses in our monitoring system. Out of these, 25 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,492 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
25
avg: 23
=
Network Comparison
Compared against 2 IPs in ASN 24806
Threat Level
8/10
network avg: 7.5
=
Total Reports
25
network avg: 13
++
Network INTERNET CZ, a.s. has overall threat level 8/10
Geographic Comparison
Compared against 148 IPs in CZ
Threat Level
8/10
country avg: 5.4
+
Total Reports
25
country avg: 25
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Friday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
18
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
30%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
79%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
109.164.51.230
8/10
Confidence
99%
Reports
19
ISP
STARNET, s.r.o.
194.87.77.69
10/10
Confidence
94%
Reports
30
ISP
WAIcore Ltd
185.5.70.154
8/10
Confidence
93%
Reports
34
ISP
PODA a.s.
185.71.233.73
10/10
Confidence
93%
Reports
14
ISP
United Networks SE
78.44.192.210
10/10
Confidence
88%
Reports
94
ISP
Vodafone Czech ...
89.203.248.214
10/10
Confidence
85%
Reports
11
ISP
CD-Telematika a.s.
95.85.238.54
8/10
Confidence
79%
Reports
13
ISP
Partner Hosting...
89.176.233.219
10/10
Confidence
78%
Reports
46
ISP
Vodafone Czech ...
90.180.197.128
10/10
Confidence
76%
Reports
32
ISP
O2 Czech Republ...
90.176.225.153
8/10
Confidence
73%
Reports
14
ISP
O2 Czech Republ...
46.13.100.177
10/10
Confidence
69%
Reports
22
ISP
T-Mobile Czech ...
46.8.187.186
8/10
Confidence
67%
Reports
9
ISP
Hostkey B.v.
89.203.249.141
10/10
Confidence
66%
Reports
449
ISP
CD-Telematika a.s.
188.92.13.196
8/10
Confidence
65%
Reports
14
ISP
JAW.cz s.r.o.
146.70.129.20
8/10
Confidence
65%
Reports
6
ISP
M247 Europe SRL
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.149.31
10/10
Confidence
93%
Reports
4,020
Location
NL
NL
45.205.1.5
10/10
Confidence
93%
Reports
2,950
Location
MU
MU
46.151.178.13
8/10
Confidence
93%
Reports
2,753
Location
NL
NL
200.124.160.2
10/10
Confidence
93%
Reports
2,116
Location
MX
MX
80.66.83.43
10/10
Confidence
93%
Reports
1,975
Location
RU
RU
130.12.181.98
8/10
Confidence
93%
Reports
1,224
Location
DE
DE
91.92.240.13
8/10
Confidence
93%
Reports
841
Location
DE
DE
5.83.143.40
10/10
Confidence
93%
Reports
823
Location
NL
NL
160.119.76.4
8/10
Confidence
93%
Reports
820
Location
SC
SC
103.56.148.184
10/10
Confidence
93%
Reports
634
Location
ID
ID
185.224.128.16
10/10
Confidence
93%
Reports
609
Location
NL
NL
185.156.73.157
10/10
Confidence
93%
Reports
525
Location
UA
UA
80.94.95.83
10/10
Confidence
93%
Reports
488
Location
RO
RO
154.239.6.163
8/10
Confidence
93%
Reports
470
Location
EG
EG
5.83.143.80
10/10
Confidence
93%
Reports
461
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203