Elevated Risk
Elevated threat level 8/10 for IP 41.76.213.235 from 63 reported incidents.
Behavioral profile indicates cyber threat activity with 92% confidence.
More threatening than 85% of monitored IPs
IP Address
41.76.213.235
IPv4
Public
ZA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
ZA
Location
AFRIHOST-SP
ASN 37611
63
Reports
Mixed
Data Source
Threat Categories
Hacking
27
DDoS Attack
22
Brute-Force
7
WP Login Brute Force
4
Port Scan
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Sporadic
Irregular burst activity pattern indicates intermittent use of a compromised system.
First Observed
11. July 2026
Last Activity
1. August 2026
Recent (7 days)
3 incidents
Reputable Network
This IP is hosted on a network (ASN 37611) with generally good reputation. The ISP AFRIHOST-SP maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Implement adaptive blocking rules.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
89%
Verified
Confidence History
5. Jul 2026 - 1. Aug 2026
92%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community x2 | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking Brute-Force WP Login Brute Force | Honeypot | 75% | |
| Hacking Brute-Force WP Login Brute Force +1 | Honeypot x3 | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Hacking DDoS Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 41.76.213.235
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ZA
- ASN
- AS37611
- ISP
- AFRIHOST-SP
DNS Information
- Reverse DNS
- dynamicpos.dedicated.co.za
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 63
- First Reported
- 28 Feb 2026
- Last Reported
- 1 Aug 2026, 14:41
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37611
AFRIHOST-SP
ZA
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
28
Total IPs Monitored
183
Total Reports
6.5
Reports per IP
Network Context
This IP address belongs to AFRIHOST-SP (AS37611), which manages 28 IP addresses in our monitoring system. Out of these, 183 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 312,304 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
63
avg: 18
++
Network Comparison
Compared against 99 IPs in ASN 37611
Threat Level
8/10
network avg: 5.6
+
Total Reports
63
network avg: 4
++
Network AFRIHOST-SP has overall threat level 2/10
Geographic Comparison
Compared against 1,305 IPs in ZA
Threat Level
8/10
country avg: 5.8
+
Total Reports
63
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
18 Jul 2026
11 reports
Daily Average
0.9
reports/day
Most Active
Saturday
19 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
55
DDoS Attack
32
Brute-Force
27
WP Login Brute Force
19
Port Scan
4
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
7.8/10
Avg Threat
60%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
41.76.214.94
8/10
Confidence
96%
Reports
20
Location
ZA
ZA
41.76.215.184
8/10
Confidence
84%
Reports
79
Location
ZA
ZA
41.76.209.240
10/10
Confidence
83%
Reports
10
Location
ZA
ZA
154.0.170.61
10/10
Confidence
74%
Reports
9
Location
ZA
ZA
102.182.121.173
10/10
Confidence
73%
Reports
40
Location
ZA
ZA
102.182.92.126
10/10
Confidence
70%
Reports
8
Location
ZA
ZA
154.0.171.161
8/10
Confidence
69%
Reports
9
Location
ZA
ZA
102.182.241.186
8/10
Confidence
66%
Reports
6
Location
ZA
ZA
154.0.166.254
8/10
Confidence
63%
Reports
5
Location
ZA
ZA
41.76.214.143
8/10
Confidence
62%
Reports
6
Location
ZA
ZA
41.76.213.108
8/10
Confidence
61%
Reports
4
Location
ZA
ZA
102.182.20.148
10/10
Confidence
56%
Reports
4
Location
ZA
ZA
102.182.113.56
8/10
Confidence
49%
Reports
5
Location
ZA
ZA
192.143.227.171
10/10
Confidence
49%
Reports
3
Location
ZA
ZA
102.182.121.133
10/10
Confidence
41%
Reports
3
Location
ZA
ZA
156.155.36.2
7/10
Confidence
40%
Reports
2
Location
ZA
ZA
169.0.189.61
0/10
Confidence
40%
Reports
2
Location
ZA
ZA
169.1.89.99
7/10
Confidence
40%
Reports
2
Location
ZA
ZA
2c0f:ef20:2303:8300:2047:e014:d7f4:4b0
7/10
Confidence
40%
Reports
2
Location
ZA
ZA
154.0.167.225
0/10
Confidence
38%
Reports
2
Location
ZA
ZA
IPs from the same subnet range, likely same network segment.
1
Related IPs
8/10
Avg Threat
61%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
105.225.177.135
8/10
Confidence
100%
Reports
17
ISP
Telkom SA Ltd.
13.246.179.73
8/10
Confidence
99%
Reports
24
ISP
Amazon.com, Inc.
105.28.108.165
10/10
Confidence
98%
Reports
24
ISP
SEACOM-AS
105.233.67.36
10/10
Confidence
98%
Reports
15
ISP
Cybersmart
20.87.219.67
10/10
Confidence
98%
Reports
12
ISP
Microsoft Corpo...
102.210.149.236
10/10
Confidence
97%
Reports
54
ISP
KoTDA
41.76.214.94
8/10
Confidence
96%
Reports
20
ISP
AFRIHOST-SP
93.152.208.14
10/10
Confidence
94%
Reports
142
ISP
IPv
93.152.208.18
8/10
Confidence
94%
Reports
127
ISP
IPv
102.129.200.117
10/10
Confidence
94%
Reports
98
ISP
Hbing Limited
169.239.47.178
10/10
Confidence
94%
Reports
69
ISP
Perlcom-iSPOT
102.223.47.171
10/10
Confidence
94%
Reports
59
ISP
Africa-on-Cloud-AS
4.221.162.168
10/10
Confidence
94%
Reports
57
ISP
MICROSOFT-CORP-...
102.129.186.87
10/10
Confidence
94%
Reports
55
ISP
NexonHost Srl
102.129.200.101
10/10
Confidence
94%
Reports
41
ISP
Hbing Limited
IPs with similar threat level and confidence scores.
15
Related IPs
8.9/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
51.68.207.118
10/10
Confidence
92%
Reports
10,836
Location
FR
FR
85.215.239.226
10/10
Confidence
92%
Reports
4,268
Location
DE
DE
207.90.244.11
8/10
Confidence
92%
Reports
3,778
Location
US
US
106.75.186.101
10/10
Confidence
92%
Reports
987
Location
CN
CN
106.75.164.40
10/10
Confidence
92%
Reports
977
Location
CN
CN
106.75.157.47
10/10
Confidence
92%
Reports
939
Location
CN
CN
106.75.156.189
10/10
Confidence
92%
Reports
935
Location
CN
CN
106.75.189.197
10/10
Confidence
92%
Reports
914
Location
CN
CN
87.106.98.147
8/10
Confidence
92%
Reports
802
Location
DE
DE
217.160.24.45
8/10
Confidence
92%
Reports
777
Location
DE
DE
87.106.223.228
8/10
Confidence
92%
Reports
743
Location
DE
DE
185.132.46.108
8/10
Confidence
92%
Reports
740
Location
DE
DE
77.91.97.123
8/10
Confidence
92%
Reports
708
Location
GE
GE
87.106.189.67
8/10
Confidence
92%
Reports
689
Location
DE
DE
87.106.206.249
8/10
Confidence
92%
Reports
645
Location
DE
DE