Significant Threat
IP 41.231.26.4 identified as significant threat (7/10) from 2 events.
Multiple malicious indicators detected. Confidence level: 40%.
More threatening than 72% of monitored IPs
IP Address
41.231.26.4
IPv4
Public
TN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Moderate Risk
Tunisia
Location
Agence Tunisienne Interne...
ASN 31245
2
Reports
Honeypot
Data Source
Threat Categories
Hacking
2
Exploited Host
2
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
4. June 2026
Last Activity
4. June 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 31245) with elevated threat levels. The ISP Agence Tunisienne Internet hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
7/10
High
Confidence Score
36%
Medium Confidence
Confidence History
4. Jun 2026
40%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% |
Technical Details
Basic Information
- IP Address
- 41.231.26.4
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
TN
- ASN
- AS31245
- ISP
- Agence Tunisienne Internet
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 4 Jun 2026
- Last Reported
- 4 Jun 2026, 10:49
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS31245
ATI-ISP
TN
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
4
Total IPs Monitored
38
Total Reports
9.5
Reports per IP
Network Context
This IP address belongs to ATI-ISP (AS31245), which manages 4 IP addresses in our monitoring system. Out of these, 38 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
72
%
Global Threat Ranking
This IP is more threatening than 72% of all IPs in our database.
Above Average ThreatGlobal Comparison
Compared against 199,868 reported IPs worldwide
Threat Level
7/10
avg: 5.3
+
Total Reports
2
avg: 23
--
Network Comparison
Compared against 6 IPs in ASN 31245
Threat Level
7/10
network avg: 4.5
++
Total Reports
2
network avg: 7
--
Network Agence Tunisienne Internet has overall threat level 7/10
Geographic Comparison
Compared against 322 IPs in TN
Threat Level
7/10
country avg: 5.1
+
Total Reports
2
country avg: 5
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
4 Jun 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Thursday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
2
Exploited Host
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,519 threat incidents tracked globally • Last 24h: 18,988 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,036 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
4/10
Avg Threat
48%
Avg Confidence
2
High Threat
Elevated risk: Multiple related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.7/10
Avg Threat
84%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
41.224.59.162
8/10
Confidence
95%
Reports
43
ISP
ORANGE
196.203.207.238
10/10
Confidence
94%
Reports
101
ISP
TOPNET
213.150.169.18
10/10
Confidence
94%
Reports
15
ISP
TN-BB-AS Tunisi...
197.5.145.114
10/10
Confidence
93%
Reports
84
ISP
Tunisie-Telecom
196.203.166.131
10/10
Confidence
88%
Reports
19
ISP
TN-BB-AS Tunisi...
197.31.32.198
8/10
Confidence
87%
Reports
34
ISP
ORANGE
197.5.145.102
10/10
Confidence
83%
Reports
215
ISP
Tunisie-Telecom
41.226.161.193
10/10
Confidence
82%
Reports
15
ISP
TOPNET
197.5.145.8
10/10
Confidence
80%
Reports
88
ISP
Tunisie-Telecom
196.203.230.17
10/10
Confidence
79%
Reports
21
ISP
ATI-ISP
197.3.168.228
10/10
Confidence
78%
Reports
31
ISP
TOPNET
41.62.159.85
10/10
Confidence
77%
Reports
59
ISP
TOPNET
196.203.254.1
10/10
Confidence
76%
Reports
17
ISP
TN-BB-AS Tunisi...
197.5.145.73
10/10
Confidence
75%
Reports
93
ISP
Tunisie-Telecom
196.179.230.128
10/10
Confidence
72%
Reports
9
ISP
TUNISIANA
IPs with similar threat level and confidence scores.
15
Related IPs
9.6/10
Avg Threat
40%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
103.48.80.188
10/10
Confidence
40%
Reports
202
Location
VN
VN
134.209.84.201
10/10
Confidence
40%
Reports
83
Location
NL
NL
167.71.119.70
10/10
Confidence
40%
Reports
78
Location
US
US
38.135.24.241
10/10
Confidence
40%
Reports
47
Location
US
US
117.141.0.165
10/10
Confidence
40%
Reports
44
Location
CN
CN
165.232.94.54
8/10
Confidence
40%
Reports
40
Location
NL
NL
173.255.204.123
10/10
Confidence
40%
Reports
39
Location
US
US
173.255.229.138
10/10
Confidence
40%
Reports
39
Location
US
US
194.5.83.92
10/10
Confidence
40%
Reports
37
Location
HK
HK
98.88.32.94
10/10
Confidence
40%
Reports
33
Location
US
US
149.88.21.155
10/10
Confidence
40%
Reports
33
Location
US
US
159.65.217.18
10/10
Confidence
40%
Reports
33
Location
US
US
92.205.186.4
8/10
Confidence
40%
Reports
31
Location
FR
FR
66.132.195.123
8/10
Confidence
40%
Reports
31
Location
US
US
204.48.24.249
10/10
Confidence
40%
Reports
31
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203