Significant Threat
IP 102.213.179.104 identified as significant threat (8/10) from 45 events.
Multiple malicious indicators detected. Confidence level: 95%.
More threatening than 82% of monitored IPs
IP Address
102.213.179.104
IPv4
Public
KE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Kenya
Location
NEXT-THING-NETWORKS-LTD
ASN 329261
45
Reports
Mixed
Data Source
Threat Categories
Brute-Force
27
WP Login Brute Force
2
Hacking
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
13. May 2026
Last Activity
8. June 2026
Recent (7 days)
7 incidents
Reputable Network
This IP is hosted on a network (ASN 329261) with generally good reputation. The ISP NEXT-THING-NETWORKS-LTD maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
94%
Verified
Confidence History
22. May 2026 - 8. Jun 2026
95%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force | Community | 75% |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Hacking | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 102.213.179.104
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KE
- ASN
- AS329261
- ISP
- NEXT-THING-NETWORKS-LTD
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 45
- First Reported
- 8 May 2026
- Last Reported
- 8 Jun 2026, 18:28
Comparative Analysis
How this IP compares to others in our threat intelligence database
82
%
Global Threat Ranking
This IP is more threatening than 82% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,581 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
45
avg: 23
++
Network Comparison
Compared against 2 IPs in ASN 329261
Threat Level
8/10
network avg: 7.5
=
Total Reports
45
network avg: 23
++
Geographic Comparison
Compared against 433 IPs in KE
Threat Level
8/10
country avg: 5.8
+
Total Reports
45
country avg: 8
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
31 May 2026
5 reports
Daily Average
1.5
reports/day
Most Active
Sunday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
37
WP Login Brute Force
7
Hacking
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 01:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
7/10
Avg Threat
30%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
1
Related IPs
7/10
Avg Threat
30%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.1/10
Avg Threat
85%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
197.248.207.139
10/10
Confidence
97%
Reports
45
ISP
Safaricom
197.248.159.242
10/10
Confidence
93%
Reports
18
ISP
Safaricom
105.27.148.94
10/10
Confidence
92%
Reports
81
ISP
SEACOM-AS
41.215.45.30
8/10
Confidence
91%
Reports
214
ISP
ACCESSKENYA-KE ...
41.90.100.147
10/10
Confidence
91%
Reports
67
ISP
Safaricom
197.232.80.184
8/10
Confidence
91%
Reports
36
ISP
JTL
41.90.243.186
8/10
Confidence
90%
Reports
17
ISP
SAFARICOM-LIMITED
197.248.8.33
8/10
Confidence
86%
Reports
70
ISP
Safaricom
197.138.129.15
10/10
Confidence
86%
Reports
7
ISP
Kenya Education...
197.248.104.31
8/10
Confidence
82%
Reports
45
ISP
Safaricom
197.248.104.19
8/10
Confidence
81%
Reports
48
ISP
Safaricom
197.248.144.117
10/10
Confidence
75%
Reports
556
ISP
Safaricom
41.89.227.161
10/10
Confidence
75%
Reports
13
ISP
Kenya Education...
102.135.168.153
8/10
Confidence
75%
Reports
9
ISP
POA-INTERNET-AS
197.248.34.233
10/10
Confidence
74%
Reports
21
ISP
Safaricom
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
95%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
93.123.109.114
10/10
Confidence
95%
Reports
744
Location
BG
BG
106.75.188.200
10/10
Confidence
95%
Reports
705
Location
CN
CN
185.242.226.81
10/10
Confidence
95%
Reports
375
Location
US
US
185.242.226.72
10/10
Confidence
95%
Reports
334
Location
US
US
34.14.33.150
8/10
Confidence
95%
Reports
323
Location
BE
BE
20.220.148.239
10/10
Confidence
95%
Reports
190
Location
CA
CA
86.54.31.32
8/10
Confidence
95%
Reports
182
Location
CA
CA
117.176.131.191
10/10
Confidence
95%
Reports
180
Location
CN
CN
103.99.144.99
10/10
Confidence
95%
Reports
171
Location
IN
IN
195.184.76.208
10/10
Confidence
95%
Reports
166
Location
US
US
91.230.168.8
10/10
Confidence
95%
Reports
159
Location
US
US
91.231.89.246
10/10
Confidence
95%
Reports
153
Location
FR
FR
170.79.37.88
10/10
Confidence
95%
Reports
144
Location
PE
PE
91.196.152.177
10/10
Confidence
95%
Reports
142
Location
FR
FR
186.96.151.198
10/10
Confidence
95%
Reports
132
Location
MX
MX
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203