IP Address

197.232.18.79

IPv4 Public
KE KE
AS36866
JTL
15 Reports
This IP is under Observation Suspicious activity detected - monitor closely
8/10 Threat
63% Confidence
15 Reports

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Above Average Risk
KE
KE Location
JTL ASN 36866
15 Reports
Mixed Data Source

Notable Threat

IP 197.232.18.79 rated 8/10 from 15 verified reports.

Multiple security incidents attributed to this IP. Confidence: 63%.

More threatening than 78% of monitored IPs

Threat Categories

Brute-Force 13
WP Login Brute Force 2

Technical Details

Brute-force attacks systematically attempt password combinations against authentication systems.

Recommended Mitigations

Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.

Behavioral Analysis

Activity Pattern: Consistent Activity

Steady malicious activity over 3 weeks indicates persistent threat actor operations.

First Observed 16. May 2026
Last Activity 8. June 2026
Recent (7 days) 2 incidents

Reputable Network

This IP is hosted on a network (ASN 36866) with generally good reputation. The ISP JTL maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement appropriate security controls.

Long-term blocking recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 3/10 Low
Confidence Score 63% High Confidence

Confidence History

24. Apr 2026 - 8. Jun 2026
63% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (15)

Date Categories Source Confidence
Brute-Force Community 75%
Brute-Force Community 75%
WP Login Brute Force Honeypot 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
Brute-Force Community 75%
WP Login Brute Force Honeypot 75%
10 of 15 shown

Technical Details

Basic Information

IP Address
197.232.18.79
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class C

Geolocation

Country
KE KE
ASN
AS36866
ISP
JTL

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
15
First Reported
24 Apr 2026
Last Reported
8 Jun 2026, 07:48

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS36866
JTL
KE KE

Network Threat Assessment

2/10
This network appears to be relatively clean with very low threat indicators.

Network Statistics

9
Total IPs Monitored
74
Total Reports
8.2
Reports per IP

Network Context

This IP address belongs to JTL (AS36866), which manages 9 IP addresses in our monitoring system. Out of these, 74 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.

Network status: This network appears to be well-maintained with low threat indicators.

Comparative Analysis

How this IP compares to others in our threat intelligence database

78 %

Global Threat Ranking

This IP is more threatening than 78% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 199,652 reported IPs worldwide

Threat Level 8/10 avg: 5.3 ++
Total Reports 15 avg: 23 -

Network Comparison

Compared against 19 IPs in ASN 36866

Threat Level 8/10 network avg: 5.6 +
Total Reports 15 network avg: 5 ++
Network JTL has overall threat level 2/10

Geographic Comparison

Compared against 433 IPs in KE

Threat Level 8/10 country avg: 5.8 +
Total Reports 15 country avg: 8 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

187,375 threat incidents tracked globally • Last 24h: 18,936 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    38,468 20.5%
  2. 02
    IN
    India IN
    29,136 15.5%
  3. 03
    CN
    China CN
    26,029 13.9%
  4. 04
    BR
    Brazil BR
    10,256 5.5%
  5. 05
    DE
    Germany DE
    7,144 3.8%
  6. 06
    SG
    Singapore SG
    6,476 3.5%
  7. 07
    ID
    Indonesia ID
    5,551 3%
  8. 08
    RU
    Russia RU
    4,703 2.5%
  9. 09
    PK
    Pakistan PK
    4,677 2.5%
  10. 10
    NL
    Netherlands NL
    4,358 2.3%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same country with similar threat profiles.

15 Related IPs
8.9/10 Avg Threat
87% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
197.248.207.139 10/10
Confidence 97%
Reports 45
ISP Safaricom
8 Jun 2026
102.213.179.104 8/10
Confidence 95%
Reports 45
ISP NEXT-THING-NETW...
8 Jun 2026
197.248.159.242 10/10
Confidence 93%
Reports 18
ISP Safaricom
11 May 2026
105.27.148.94 10/10
Confidence 92%
Reports 81
ISP SEACOM-AS
6 Jun 2026
41.215.45.30 8/10
Confidence 91%
Reports 214
ISP ACCESSKENYA-KE ...
12 May 2026
41.90.100.147 10/10
Confidence 91%
Reports 67
ISP Safaricom
4 Jun 2026
197.232.80.184 8/10
Confidence 91%
Reports 36
ISP JTL
9 Jun 2026
41.90.243.186 8/10
Confidence 90%
Reports 17
ISP SAFARICOM-LIMITED
8 Jun 2026
197.248.8.33 8/10
Confidence 86%
Reports 70
ISP Safaricom
6 Jun 2026
197.138.129.15 10/10
Confidence 86%
Reports 7
ISP Kenya Education...
18 May 2026
197.248.104.31 8/10
Confidence 82%
Reports 45
ISP Safaricom
29 May 2026
197.248.104.19 8/10
Confidence 81%
Reports 48
ISP Safaricom
1 Jun 2026
197.248.144.117 10/10
Confidence 75%
Reports 556
ISP Safaricom
1 Mar 2026
41.89.227.161 10/10
Confidence 75%
Reports 13
ISP Kenya Education...
8 Mar 2026
102.135.168.153 8/10
Confidence 75%
Reports 9
ISP POA-INTERNET-AS
8 Jun 2026

IPs with similar threat level and confidence scores.

15 Related IPs
9.2/10 Avg Threat
63% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
3.130.96.91 8/10
Confidence 63%
Reports 43,462
Location US US
4 Feb 2026
3.134.148.59 8/10
Confidence 63%
Reports 14,980
Location US US
4 Feb 2026
92.118.39.87 10/10
Confidence 63%
Reports 14,713
Location US US
18 Apr 2026
87.120.191.13 10/10
Confidence 63%
Reports 13,131
Location US US
19 Feb 2026
3.137.73.221 8/10
Confidence 63%
Reports 10,228
Location US US
4 Feb 2026
3.132.23.201 8/10
Confidence 63%
Reports 9,576
Location US US
4 Feb 2026
3.149.59.26 8/10
Confidence 63%
Reports 8,795
Location US US
4 Feb 2026
167.250.224.25 10/10
Confidence 63%
Reports 8,244
Location BR BR
14 May 2026
176.117.107.74 10/10
Confidence 63%
Reports 5,739
Location NL NL
21 Dec 2025
142.202.188.211 10/10
Confidence 63%
Reports 4,136
Location US US
8 Apr 2026
176.117.107.91 10/10
Confidence 63%
Reports 3,994
Location NL NL
17 Dec 2025
196.251.70.234 10/10
Confidence 63%
Reports 3,796
Location SC SC
15 Oct 2025
45.88.186.70 8/10
Confidence 63%
Reports 3,632
Location NL NL
2 Feb 2026
2.57.122.209 10/10
Confidence 63%
Reports 2,573
Location RO RO
10 Feb 2026
64.188.91.248 10/10
Confidence 63%
Reports 2,232
Location DE DE
3 Mar 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "197.232.18.79",
    "threat_level": 8,
    "confidence_score": 63,
    "total_reports": 15,
    "country_code": "KE",
    "isp_name": "JTL",
    "asn": "36866",
    "first_reported": "2026-04-24 08:03:17",
    "last_reported": "2026-06-08 07:48:10",
    "exported_at": "2026-06-09T10:21:57+02:00",
    "source": "https://reportedip.de/ip/197.232.18.79/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses