41.78.27.213

41.78.27.213 is a threat-intelligence indicator (IPv4 address) classified as Suspicious, corroborated across 3 independent feeds. It is aggregated and de-duplicated from many open and commercial threat feeds, with confidence scoring and decay over time.

Indicator facts

Type

IPv4 address

Indicator

41.78.27.213

Classification

Suspicious

Confidence

80 / 100

Corroboration

3 independent sources

First seen

2026-09-13

Last seen

2026-09-17

Network (ASN)

AS37156 — XTRANET

Country

KE

Tags

• ssh
• brute-force
• attacker
• sshpwauth
• scanner

Related CVEs (17)

• CVE-2026-20244
• CVE-2026-20217
• CVE-2026-20216
• CVE-2026-20215
• CVE-2026-20214
• CVE-2026-20213
• CVE-2025-20260
• CVE-2024-20506
• CVE-2024-20505
• CVE-2023-20052
• CVE-2023-20032
• CVE-2022-20792
• CVE-2022-20785
• CVE-2021-27506
• CVE-2021-1405
• CVE-2020-3481
• CVE-2016-1405

← Threat intelligence command center · Explore the indicator corpus