Extreme Threat
IP 197.230.149.202 classified at threat level 10/10 with 43 documented attacks.
Advanced threat indicators confirmed with 69% certainty.
More threatening than 92% of monitored IPs
IP Address
197.230.149.202
IPv4
Public
MA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
MA
Location
ASMedi
ASN 36925
43
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
30
Hacking
3
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
9. June 2026
Last Activity
9. June 2026
Recent (7 days)
2 incidents
Reputable Network
This IP is hosted on a network (ASN 36925) with generally good reputation. The ISP ASMedi maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
7/10
High
Confidence Score
69%
High Confidence
Confidence History
17. Jan 2026 - 9. Jun 2026
69%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Exploited Host Hacking | Honeypot x2 | 75% |
| New | Hacking Exploited Host | Honeypot x2 | 75% |
| Exploited Host Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 197.230.149.202
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class C
Geolocation
- Country
-
MA
- ASN
- AS36925
- ISP
- ASMedi
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 43
- First Reported
- 27 Aug 2025
- Last Reported
- 9 Jun 2026, 04:15
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS36925
ASMedi
MA
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
25
Total IPs Monitored
153
Total Reports
6.1
Reports per IP
Network Context
This IP address belongs to ASMedi (AS36925), which manages 25 IP addresses in our monitoring system. Out of these, 153 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,961 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
43
avg: 23
++
Network Comparison
Compared against 58 IPs in ASN 36925
Threat Level
10/10
network avg: 5.0
++
Total Reports
43
network avg: 4
++
Network ASMedi has overall threat level 1/10
Geographic Comparison
Compared against 568 IPs in MA
Threat Level
10/10
country avg: 5.3
++
Total Reports
43
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Jun 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Saturday
24 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
43
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 16:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,879 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5% -
02
India29,222 15.6% -
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.2/10
Avg Threat
42%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
197.153.56.9
8/10
Confidence
98%
Reports
46
Location
MA
MA
197.153.57.103
10/10
Confidence
81%
Reports
65
Location
MA
MA
196.119.80.83
10/10
Confidence
56%
Reports
4
Location
MA
MA
196.115.30.98
8/10
Confidence
48%
Reports
4
Location
MA
MA
197.153.57.225
10/10
Confidence
44%
Reports
5
Location
MA
MA
196.119.127.137
8/10
Confidence
42%
Reports
5
Location
MA
MA
196.119.195.170
7/10
Confidence
40%
Reports
2
Location
MA
MA
196.119.56.4
7/10
Confidence
40%
Reports
2
Location
MA
MA
196.127.155.242
7/10
Confidence
36%
Reports
2
Location
MA
MA
197.230.213.82
0/10
Confidence
35%
Reports
2
Location
MA
MA
197.230.162.123
7/10
Confidence
34%
Reports
4
Location
MA
MA
196.117.64.237
7/10
Confidence
33%
Reports
3
Location
MA
MA
197.153.81.239
7/10
Confidence
33%
Reports
3
Location
MA
MA
196.115.198.162
7/10
Confidence
31%
Reports
3
Location
MA
MA
102.100.183.45
0/10
Confidence
30%
Reports
3
Location
MA
MA
196.126.74.229
7/10
Confidence
30%
Reports
1
Location
MA
MA
196.117.172.217
0/10
Confidence
30%
Reports
1
Location
MA
MA
41.92.100.69
0/10
Confidence
30%
Reports
1
Location
MA
MA
196.126.11.9
7/10
Confidence
30%
Reports
1
Location
MA
MA
196.115.35.185
7/10
Confidence
30%
Reports
1
Location
MA
MA
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
197.153.56.9
8/10
Confidence
98%
Reports
46
ISP
ASMedi
81.192.46.36
10/10
Confidence
97%
Reports
67
ISP
Itissalat Al-MA...
41.137.20.211
8/10
Confidence
97%
Reports
21
ISP
MAROCCONNECT
160.174.129.232
10/10
Confidence
94%
Reports
86
ISP
Itissalat Al-MA...
81.192.135.9
10/10
Confidence
94%
Reports
69
ISP
Itissalat Al-MA...
81.192.46.32
10/10
Confidence
93%
Reports
87
ISP
Itissalat Al-MA...
81.192.46.49
10/10
Confidence
92%
Reports
120
ISP
Itissalat Al-MA...
81.192.46.45
10/10
Confidence
90%
Reports
110
ISP
Itissalat Al-MA...
197.153.57.103
10/10
Confidence
81%
Reports
65
ISP
ASMedi
160.177.67.84
10/10
Confidence
79%
Reports
95
ISP
MT-MPLS
41.142.215.250
10/10
Confidence
79%
Reports
95
ISP
MT-MPLS
41.249.60.105
10/10
Confidence
79%
Reports
34
ISP
MT-MPLS
105.155.165.177
10/10
Confidence
78%
Reports
192
ISP
MT-MPLS
81.192.46.29
10/10
Confidence
77%
Reports
701
ISP
Itissalat Al-MA...
41.142.24.168
10/10
Confidence
77%
Reports
95
ISP
MT-MPLS
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
69%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.95.147.229
8/10
Confidence
69%
Reports
36,354
Location
NL
NL
77.83.240.70
8/10
Confidence
69%
Reports
34,366
Location
US
US
91.196.152.88
10/10
Confidence
69%
Reports
1,953
Location
FR
FR
162.216.150.49
10/10
Confidence
69%
Reports
1,912
Location
US
US
91.196.152.3
10/10
Confidence
69%
Reports
1,854
Location
FR
FR
51.91.168.102
8/10
Confidence
69%
Reports
1,760
Location
FR
FR
66.132.153.55
10/10
Confidence
69%
Reports
1,191
Location
US
US
128.14.239.39
8/10
Confidence
69%
Reports
1,142
Location
US
US
172.105.128.12
10/10
Confidence
69%
Reports
950
Location
US
US
161.132.50.196
10/10
Confidence
69%
Reports
921
Location
PE
PE
46.19.137.194
10/10
Confidence
69%
Reports
894
Location
CH
CH
35.203.210.70
10/10
Confidence
69%
Reports
863
Location
GB
GB
167.99.137.131
10/10
Confidence
69%
Reports
835
Location
DE
DE
152.32.191.98
10/10
Confidence
69%
Reports
831
Location
HK
HK
78.41.63.6
10/10
Confidence
69%
Reports
796
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 185.246.128.133
- 139.59.170.85
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203