Substantial Risk
Threat level 8/10 for 41.63.63.211 based on 4 documented incidents.
Consistent suspicious behavior patterns. 47% confidence rating.
More threatening than 76% of monitored IPs
IP Address
41.63.63.211
IPv4
Public
ZM
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Zambia
Location
ZAMREN
ASN 37532
4
Reports
Mixed
Data Source
Threat Categories
SSH
2
Brute-Force
2
Hacking
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
26. May 2026
Last Activity
7. June 2026
Recent (7 days)
1 incidents
Moderate Network Risk
The network hosting this IP (ASN 37532, operated by ZAMREN) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
45%
Medium Confidence
Confidence History
26. May 2026 - 7. Jun 2026
47%
Current
Stable
Trend
Security Reports (4)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 41.63.63.211
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ZM
- ASN
- AS37532
- ISP
- ZAMREN
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 4
- First Reported
- 26 May 2026
- Last Reported
- 7 Jun 2026, 10:40
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37532
ZAMREN
ZM
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
2
Total IPs Monitored
50
Total Reports
25
Reports per IP
Network Context
This IP address belongs to ZAMREN (AS37532), which manages 2 IP addresses in our monitoring system. Out of these, 50 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
76
%
Global Threat Ranking
This IP is more threatening than 76% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,930 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
4
avg: 23
--
Network Comparison
Compared against 3 IPs in ASN 37532
Threat Level
8/10
network avg: 7.7
=
Total Reports
4
network avg: 21
--
Network ZAMREN has overall threat level 4/10
Geographic Comparison
Compared against 303 IPs in ZM
Threat Level
8/10
country avg: 5.5
+
Total Reports
4
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
27 May 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Wednesday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
2
SSH
2
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 10:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,611 threat incidents tracked globally • Last 24h: 18,967 Logs
FEED
Top Threat Sources
-
01
United States38,485 20.5% -
02
India29,222 15.6% -
03
China26,039 13.9% -
04
Brazil10,262 5.5% -
05
Germany7,147 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,559 3% -
08
Russia4,710 2.5% -
09
Pakistan4,702 2.5% -
10
Netherlands4,362 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
2
Related IPs
7.5/10
Avg Threat
55%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.3/10
Avg Threat
56%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
102.23.122.235
10/10
Confidence
87%
Reports
67
ISP
Infratel-Corpor...
41.63.62.103
8/10
Confidence
85%
Reports
56
ISP
ZAMREN
41.60.163.83
8/10
Confidence
70%
Reports
10
ISP
Liquid Telecomm...
41.60.144.86
10/10
Confidence
69%
Reports
14
ISP
Liquid Telecomm...
41.60.156.81
10/10
Confidence
63%
Reports
9
ISP
Liquid Telecomm...
216.234.213.132
8/10
Confidence
59%
Reports
7
ISP
Space Explorati...
41.60.191.74
10/10
Confidence
53%
Reports
4
ISP
Liquid Telecomm...
45.215.251.169
8/10
Confidence
49%
Reports
5
ISP
ZAIN-ZAMBIA
41.60.163.151
8/10
Confidence
49%
Reports
5
ISP
Liquid Telecomm...
216.234.213.194
8/10
Confidence
48%
Reports
4
ISP
Space Explorati...
41.216.82.25
7/10
Confidence
48%
Reports
2
ISP
MTN Zambia
45.213.148.88
8/10
Confidence
47%
Reports
4
ISP
ZAIN-ZAMBIA
41.60.167.10
7/10
Confidence
40%
Reports
8
ISP
Liquid Telecomm...
45.213.238.86
7/10
Confidence
40%
Reports
5
ISP
ZAIN-ZAMBIA
2605:59c8:6c94:8b08:9d2b:d53e:70f6:a53c
7/10
Confidence
40%
Reports
2
ISP
Space Explorati...
IPs with similar threat level and confidence scores.
15
Related IPs
8.5/10
Avg Threat
47%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
104.197.69.115
10/10
Confidence
47%
Reports
47
Location
US
US
169.150.203.237
8/10
Confidence
47%
Reports
41
Location
US
US
50.116.9.129
10/10
Confidence
47%
Reports
40
Location
US
US
185.200.240.65
10/10
Confidence
47%
Reports
40
Location
RU
RU
159.89.141.53
10/10
Confidence
47%
Reports
37
Location
US
US
205.185.121.77
8/10
Confidence
47%
Reports
33
Location
US
US
209.141.54.4
7/10
Confidence
47%
Reports
27
Location
US
US
43.156.116.171
10/10
Confidence
47%
Reports
23
Location
SG
SG
178.176.84.60
10/10
Confidence
47%
Reports
22
Location
RU
RU
117.247.51.92
7/10
Confidence
47%
Reports
18
Location
IN
IN
185.197.195.89
10/10
Confidence
47%
Reports
18
Location
DE
DE
103.62.153.61
7/10
Confidence
47%
Reports
18
Location
PH
PH
103.105.155.27
7/10
Confidence
47%
Reports
16
Location
IN
IN
183.88.242.105
7/10
Confidence
47%
Reports
16
Location
TH
TH
63.180.175.164
7/10
Confidence
47%
Reports
16
Location
DE
DE
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203