Elevated Risk
Elevated threat level 8/10 for IP 41.137.20.211 from 21 reported incidents.
Behavioral profile indicates cyber threat activity with 97% confidence.
More threatening than 82% of monitored IPs
IP Address
41.137.20.211
IPv4
Public
MA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
MA
Location
MAROCCONNECT
ASN 36884
21
Reports
Honeypot
Data Source
Threat Categories
SSH
16
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Moderate Network Risk
The network hosting this IP (ASN 36884, operated by MAROCCONNECT) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
67%
High Confidence
Confidence History
18. Feb 2026 - 25. Feb 2026
97%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 41.137.20.211
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
MA
- ASN
- AS36884
- ISP
- MAROCCONNECT
DNS Information
- Reverse DNS
- dynamic.casap1-211-20-137-41.wanamaroc.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 21
- First Reported
- 18 Feb 2026
- Last Reported
- 25 Feb 2026, 14:47
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS36884
MAROCCONNECT
MA
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
4
Total IPs Monitored
26
Total Reports
6.5
Reports per IP
Network Context
This IP address belongs to MAROCCONNECT (AS36884), which manages 4 IP addresses in our monitoring system. Out of these, 26 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,481 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
21
avg: 23
=
Network Comparison
Compared against 85 IPs in ASN 36884
Threat Level
8/10
network avg: 4.8
++
Total Reports
21
network avg: 2
++
Network MAROCCONNECT has overall threat level 4/10
Geographic Comparison
Compared against 565 IPs in MA
Threat Level
8/10
country avg: 5.3
++
Total Reports
21
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Monday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
16
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
4.9/10
Avg Threat
35%
Avg Confidence
10
High Threat
High-risk network: Majority of related IPs are flagged
105.77.211.12
8/10
Confidence
56%
Reports
5
Location
MA
MA
105.69.96.198
0/10
Confidence
51%
Reports
3
Location
MA
MA
197.146.157.38
8/10
Confidence
42%
Reports
3
Location
MA
MA
105.69.114.118
8/10
Confidence
42%
Reports
3
Location
MA
MA
105.66.7.246
0/10
Confidence
40%
Reports
2
Location
MA
MA
197.145.227.36
7/10
Confidence
40%
Reports
2
Location
MA
MA
105.77.208.53
7/10
Confidence
37%
Reports
4
Location
MA
MA
105.68.138.221
7/10
Confidence
35%
Reports
3
Location
MA
MA
105.77.208.183
7/10
Confidence
33%
Reports
3
Location
MA
MA
105.77.210.207
7/10
Confidence
33%
Reports
3
Location
MA
MA
197.146.32.181
7/10
Confidence
30%
Reports
1
Location
MA
MA
105.71.132.138
0/10
Confidence
30%
Reports
1
Location
MA
MA
105.68.132.200
0/10
Confidence
30%
Reports
1
Location
MA
MA
197.147.180.209
0/10
Confidence
29%
Reports
2
Location
MA
MA
197.146.188.227
6/10
Confidence
29%
Reports
2
Location
MA
MA
197.146.135.221
6/10
Confidence
29%
Reports
2
Location
MA
MA
105.68.128.148
6/10
Confidence
29%
Reports
2
Location
MA
MA
197.146.207.253
6/10
Confidence
29%
Reports
2
Location
MA
MA
105.68.142.190
7/10
Confidence
29%
Reports
1
Location
MA
MA
105.68.253.40
0/10
Confidence
29%
Reports
1
Location
MA
MA
IPs from the same country with similar threat profiles.
15
Related IPs
9.9/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
197.153.56.9
8/10
Confidence
98%
Reports
46
ISP
ASMedi
81.192.46.36
10/10
Confidence
97%
Reports
67
ISP
Itissalat Al-MA...
160.174.129.232
10/10
Confidence
94%
Reports
86
ISP
Itissalat Al-MA...
81.192.135.9
10/10
Confidence
94%
Reports
69
ISP
Itissalat Al-MA...
81.192.46.32
10/10
Confidence
93%
Reports
87
ISP
Itissalat Al-MA...
81.192.46.49
10/10
Confidence
92%
Reports
119
ISP
Itissalat Al-MA...
81.192.46.45
10/10
Confidence
90%
Reports
110
ISP
Itissalat Al-MA...
197.153.57.103
10/10
Confidence
81%
Reports
65
ISP
ASMedi
160.177.67.84
10/10
Confidence
79%
Reports
95
ISP
MT-MPLS
41.142.215.250
10/10
Confidence
79%
Reports
95
ISP
MT-MPLS
41.249.60.105
10/10
Confidence
79%
Reports
34
ISP
MT-MPLS
105.155.165.177
10/10
Confidence
78%
Reports
192
ISP
MT-MPLS
81.192.46.29
10/10
Confidence
77%
Reports
701
ISP
Itissalat Al-MA...
41.142.24.168
10/10
Confidence
77%
Reports
95
ISP
MT-MPLS
41.249.46.59
10/10
Confidence
77%
Reports
95
ISP
MT-MPLS
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
106.75.186.101
10/10
Confidence
97%
Reports
717
Location
CN
CN
106.75.164.40
10/10
Confidence
97%
Reports
712
Location
CN
CN
87.121.84.126
8/10
Confidence
97%
Reports
259
Location
US
US
87.121.84.80
10/10
Confidence
97%
Reports
210
Location
US
US
87.121.84.82
8/10
Confidence
97%
Reports
209
Location
US
US
87.121.84.127
8/10
Confidence
97%
Reports
195
Location
US
US
103.98.176.164
10/10
Confidence
97%
Reports
173
Location
ID
ID
87.121.84.119
8/10
Confidence
97%
Reports
162
Location
US
US
87.121.84.121
8/10
Confidence
97%
Reports
149
Location
US
US
103.88.76.27
10/10
Confidence
97%
Reports
131
Location
IN
IN
124.55.178.99
8/10
Confidence
97%
Reports
120
Location
KR
KR
185.100.212.141
10/10
Confidence
97%
Reports
118
Location
IN
IN
156.239.225.149
10/10
Confidence
97%
Reports
115
Location
SC
SC
87.121.84.125
8/10
Confidence
97%
Reports
112
Location
US
US
172.94.9.62
10/10
Confidence
97%
Reports
112
Location
US
US
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203