197.211.209.236 Threat Intelligence and Host Information

May 21, 2025 ipinfopage

General

This page contains threat intelligence information for the IPv4 address 197.211.209.236 and was generated either as a result of observed malicious activity or as an information gathering exercise to assist with enrichment of security events and context. All information is gathered passively through aggregation of public sources, or observations through activity upon honeynets. The host score is calculated through a series of statistically weighted values and machine learning which takes into account metadata such as host information, frequency, volume and global distribution of malicious activity, association with other known malicious hosts or networks, proxying or anonymising behaviour such as with tor exit nodes, residential proxies or VPN services, and many other attributes. These values are historical and indicative only - and should not be taken to be an accurate representation of the users, businesses or networks in which they reside.

Potentially Malicious Host 🟡 37/100

Host and Network Information

Mitre ATT&CK IDs: T1498 - Network Denial of Service
Tags: attack ddos, botnet, Cyclops, ddos, DDOS, Gamardeon, HermeticWiper, IsaacWiper, KillNet, list ips, PartyTicket, russia, russian, ukraine, WhisperGate
View other sources: Spamhaus VirusTotal

Country: Zimbabwe
Network:
Noticed: 25 times
Protocols Attacked: Anonymous Proxy
Countries Attacked: Russian Federation

Malware Detected on Host

Count: 2 2a82589f24886e7510a6fda705879626e01548a05023563513ac54bfb117472b 5d832b9070452668a69f0899e210ca177c1a2c2a2e279be831e0fefb3e499a3c

Map

Whois Information

inetnum: 197.211.208.0 - 197.211.215.255
netname: ZOL-16e-MOBILE-CUSTOMERS
descr: ZOL Customers on ZTE Mobile WiMAX Platform
country: ZW
admin-c: BS10-AFRINIC
admin-c: GJ1-AFRINIC
admin-c: JHM1-AFRINIC
tech-c: BS10-AFRINIC
tech-c: GJ1-AFRINIC
tech-c: JHM1-AFRINIC
status: ASSIGNED PA
mnt-by: LIQUID-TOL-MNT
parent: 197.211.192.0 - 197.211.255.255
person: B Siwela
address: 3rd Floor Greenbridge South
address: Eastgate Center
address: R. Mugabe Road
address: Harare
address: Zimbabwe
phone: tel:+263-77-467-3452
fax-no: tel:+263-4-702-375
nic-hdl: BS10-AFRINIC
mnt-by: GENERATED-DVCNVXWBH3VN3XZXTRPHOT0OJ77GUNN3-MNT
person: G Jaya
address: 3rd Floor Greenbridge South
address: Eastgate Center
address: R. Mugabe Road
address: Harare
address: Zimbabwe
phone: tel:+263-77-337-3135
fax-no: tel:+263-4-702-375
nic-hdl: GJ1-AFRINIC
mnt-by: GENERATED-QPEEUIPPW1WPRZ5HLHRXAVHDOKWLC9UC-MNT
person: John H Mwangi
address: Liquid Telecom Kenya
address: P.O.Box 62499 - 00200
address: Nairobi Kenya
address: Nairobi, Kenya
address: Kenya
phone: tel:+254-20-556755
phone: tel:+254-20-555938
fax-no: tel:+254-20-828685
org: ORG-KDN1-AFRINIC
nic-hdl: JHM1-AFRINIC
mnt-by: GENERATED-TUIQHNJQOYTIRNRPHXB2YI5P9VD0GOK6-MNT
route: 197.211.209.0/24
descr: Maintainer Liquid Telecommunications Operations Limited
origin: AS30844
org: ORG-LTOL1-AFRINIC
mnt-lower: LIQUID-TOL-MNT
mnt-by: AFRINIC-HM-MNT
organisation: ORG-LTOL1-AFRINIC
org-name: Liquid Telecommunications Operations Limited
org-type: LIR
country: MU
address: 10th Floor,
address: Raffles Tower,
address: 19 Cybercity
address: Ebene
phone: tel:+254-733-222204
phone: tel:+230-466-7620
phone: tel:+263-8677-033306
phone: tel:+254-731-033754
admin-c: CM53-AFRINIC
admin-c: AS116-AFRINIC
admin-c: RD10-AFRINIC
admin-c: MC69-AFRINIC
tech-c: PS44-AFRINIC
tech-c: CM53-AFRINIC
tech-c: AS116-AFRINIC
tech-c: MC69-AFRINIC
tech-c: DV5-AFRINIC
mnt-ref: AFRINIC-HM-MNT
mnt-ref: LIQUID-TOL-MNT
mnt-by: AFRINIC-HM-MNT

Links to attack logs

Share on: