Extreme Threat
IP 41.220.48.88 classified at threat level 10/10 with 27 documented attacks.
Advanced threat indicators confirmed with 68% certainty.
More threatening than 99% of monitored IPs
IP Address
41.220.48.88
IPv4
Public
MU
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Mauritius
Location
African Network Informati...
ASN 36900
27
Reports
Honeypot
Data Source
Threat Categories
Hacking
27
SSH
25
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
8. September 2026
Last Activity
9. September 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 36900) with elevated threat levels. The ISP African Network Information Center - (AfriNIC) Ltd hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Immediate monitoring recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
3/10
Low
Confidence Score
67%
High Confidence
Confidence History
8. Sep 2026 - 9. Sep 2026
68%
Current
Stable
Trend
Security Reports (27)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 41.220.48.88
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
MU
- ASN
- AS36900
- ISP
- African Network Information Center - (AfriNIC) Ltd
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 27
- First Reported
- 8 Sep 2026
- Last Reported
- 9 Sep 2026, 09:45
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS36900
African Network Information Center - (AfriNIC) Ltd
MU
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
1
Total IPs Monitored
1
Total Reports
1
Reports per IP
Network Context
This IP address belongs to African Network Information Center - (AfriNIC) Ltd (AS36900), which manages 1 IP addresses in our monitoring system. Out of these, 1 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,561 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
27
avg: 9
++
Network Comparison
Compared against 2 IPs in ASN 36900
Threat Level
10/10
network avg: 8.5
+
Total Reports
27
network avg: 14
++
Network African Network Information Center - (AfriNIC) Ltd has overall threat level 7/10
Geographic Comparison
Compared against 105 IPs in MU
Threat Level
10/10
country avg: 6.7
+
Total Reports
27
country avg: 67
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Sep 2026
22 reports
Daily Average
0.9
reports/day
Most Active
Wednesday
22 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
27
SSH
25
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
756,884 threat incidents tracked globally • Last 24h: 29,742 Logs
FEED
Top Threat Sources
-
01
United States148,134 19.6% -
02
Brazil111,841 14.8%
-
03
India87,172 11.5%
-
04
China46,061 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,369 2.4%
-
07
Netherlands17,978 2.4%
-
08
Pakistan17,806 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
1%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
1%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.4/10
Avg Threat
73%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
102.201.110.13
8/10
Confidence
95%
Reports
11
ISP
African Network...
41.173.43.34
10/10
Confidence
94%
Reports
18
ISP
Liquid Telecomm...
197.227.8.186
10/10
Confidence
87%
Reports
156
ISP
MauritiusTelecom
45.195.221.26
10/10
Confidence
86%
Reports
151
ISP
UCLOUD INFORMAT...
197.225.146.23
10/10
Confidence
79%
Reports
116
ISP
MauritiusTelecom
45.194.70.254
10/10
Confidence
78%
Reports
176
ISP
UCLOUD INFORMAT...
45.194.70.251
8/10
Confidence
77%
Reports
137
ISP
UCLOUD INFORMAT...
45.194.70.250
10/10
Confidence
76%
Reports
169
ISP
UCLOUD INFORMAT...
45.194.70.249
10/10
Confidence
75%
Reports
115
ISP
UCLOUD INFORMAT...
45.194.70.252
10/10
Confidence
74%
Reports
155
ISP
UCLOUD INFORMAT...
45.194.70.248
10/10
Confidence
71%
Reports
123
ISP
UCLOUD INFORMAT...
45.194.70.253
8/10
Confidence
71%
Reports
114
ISP
UCLOUD INFORMAT...
41.223.78.65
10/10
Confidence
51%
Reports
3
ISP
Mahanagar Telep...
197.227.106.79
10/10
Confidence
45%
Reports
25
ISP
Mauritius Telec...
197.225.160.122
7/10
Confidence
30%
Reports
1
ISP
Mauritius Telec...
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
68%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
84.54.59.31
10/10
Confidence
68%
Reports
8
Location
RU
RU
199.165.159.25
10/10
Confidence
68%
Reports
8
Location
US
US
151.243.11.208
10/10
Confidence
68%
Reports
8
Location
AE
AE
200.174.115.18
8/10
Confidence
68%
Reports
9
Location
BR
BR
187.40.208.146
10/10
Confidence
68%
Reports
7
Location
BR
BR
165.232.116.5
10/10
Confidence
68%
Reports
8
Location
DE
DE
92.36.223.142
10/10
Confidence
68%
Reports
7
Location
BA
BA
77.239.124.143
10/10
Confidence
68%
Reports
8
Location
US
US
138.68.88.64
10/10
Confidence
68%
Reports
8
Location
DE
DE
139.59.215.69
10/10
Confidence
68%
Reports
8
Location
DE
DE
164.92.135.47
10/10
Confidence
68%
Reports
8
Location
DE
DE
156.196.173.31
10/10
Confidence
68%
Reports
7
Location
EG
EG
43.173.126.86
8/10
Confidence
68%
Reports
9
Location
US
US
89.93.59.21
10/10
Confidence
68%
Reports
8
Location
FR
FR
46.162.198.12
10/10
Confidence
68%
Reports
7
Location
AM
AM