Significant Threat
IP 41.84.202.25 identified as significant threat (8/10) from 18 events.
Multiple malicious indicators detected. Confidence level: 60%.
More threatening than 78% of monitored IPs
IP Address
41.84.202.25
IPv4
Public
UG
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Uganda
Location
BCS
ASN 37273
18
Reports
Mixed
Data Source
Threat Categories
Brute-Force
17
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
16. May 2026
Last Activity
4. June 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 37273) with elevated threat levels. The ISP BCS hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
5/10
Moderate
Confidence Score
57%
High Confidence
Confidence History
2. May 2026 - 4. Jun 2026
60%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 41.84.202.25
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
UG
- ASN
- AS37273
- ISP
- BCS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 16 May 2026
- Last Reported
- 4 Jun 2026, 11:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS37273
BCS
UG
Network Threat Assessment
10/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
7
Total Reports
7
Reports per IP
Network Context
This IP address belongs to BCS (AS37273), which manages 1 IP addresses in our monitoring system. Out of these, 7 have been reported for suspicious activities, resulting in a network-wide threat level of 10/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,600 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
18
avg: 23
-
Network Comparison
Compared against 2 IPs in ASN 37273
Threat Level
8/10
network avg: 9.0
=
Total Reports
18
network avg: 13
+
Network BCS has overall threat level 10/10
Geographic Comparison
Compared against 157 IPs in UG
Threat Level
8/10
country avg: 5.7
+
Total Reports
18
country avg: 10
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
17 May 2026
2 reports
Daily Average
0.6
reports/day
Most Active
Sunday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
17
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 21:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
10/10
Avg Threat
54%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
72%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
129.205.2.18
10/10
Confidence
98%
Reports
13
ISP
Roke Investment...
196.0.3.188
10/10
Confidence
98%
Reports
12
ISP
UGANDA-TELECOM ...
196.0.120.211
10/10
Confidence
90%
Reports
117
ISP
UGANDA-TELECOM ...
154.72.210.54
8/10
Confidence
90%
Reports
15
ISP
NITA
196.0.120.6
10/10
Confidence
87%
Reports
81
ISP
UGANDA-TELECOM ...
102.218.89.110
10/10
Confidence
75%
Reports
956
ISP
SIL6-AS
45.221.74.234
10/10
Confidence
74%
Reports
49
ISP
SIMBANET-AS
129.205.24.199
8/10
Confidence
67%
Reports
8
ISP
Roke Investment...
41.190.134.37
8/10
Confidence
67%
Reports
8
ISP
Liquid Telecomm...
102.203.209.211
8/10
Confidence
62%
Reports
5
ISP
Savanna-Fibre-L...
102.209.109.181
0/10
Confidence
57%
Reports
3
ISP
Savanna-Fibre-L...
129.205.16.50
10/10
Confidence
56%
Reports
5
ISP
Roke Investment...
41.84.193.110
10/10
Confidence
54%
Reports
8
ISP
BCS
154.0.131.67
10/10
Confidence
54%
Reports
5
ISP
Roke Investment...
196.0.113.110
7/10
Confidence
52%
Reports
4
ISP
UGANDA-TELECOM ...
IPs with similar threat level and confidence scores.
15
Related IPs
9.8/10
Avg Threat
60%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
91.92.241.148
10/10
Confidence
60%
Reports
7,812
Location
BG
BG
85.105.205.63
10/10
Confidence
60%
Reports
5,965
Location
TR
TR
146.70.178.116
10/10
Confidence
60%
Reports
2,593
Location
DE
DE
181.49.161.173
10/10
Confidence
60%
Reports
1,692
Location
CO
CO
185.11.61.252
10/10
Confidence
60%
Reports
1,291
Location
RU
RU
207.46.224.85
10/10
Confidence
60%
Reports
1,045
Location
SG
SG
77.83.39.131
7/10
Confidence
60%
Reports
1,040
Location
UA
UA
27.79.41.119
10/10
Confidence
60%
Reports
953
Location
VN
VN
15.235.122.237
10/10
Confidence
60%
Reports
887
Location
CA
CA
45.142.193.122
10/10
Confidence
60%
Reports
853
Location
RO
RO
198.23.159.62
10/10
Confidence
60%
Reports
838
Location
US
US
213.209.150.239
10/10
Confidence
60%
Reports
761
Location
DE
DE
61.7.241.149
10/10
Confidence
60%
Reports
712
Location
TH
TH
209.15.168.138
10/10
Confidence
60%
Reports
626
Location
CA
CA
80.95.195.71
10/10
Confidence
60%
Reports
606
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203