Significant Threat
IP 102.221.29.109 identified as significant threat (8/10) from 18 events.
Multiple malicious indicators detected. Confidence level: 43%.
More threatening than 78% of monitored IPs
IP Address
102.221.29.109
IPv4
Public
GH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
GH
Location
BL26-AS
ASN 328797
18
Reports
Mixed
Data Source
Threat Categories
Brute-Force
16
WP Login Brute Force
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
30. June 2026
Last Activity
23. July 2026
Recent (7 days)
1 incidents
High-Risk Network Association
This IP belongs to a network (ASN 328797) with elevated threat levels. The ISP BL26-AS hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
2/10
Very Low
Confidence Score
41%
Medium Confidence
Confidence History
13. Apr 2026 - 23. Jul 2026
43%
Current
Stable
Trend
Security Reports (18)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community x2 | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 102.221.29.109
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
GH
- ASN
- AS328797
- ISP
- BL26-AS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 18
- First Reported
- 13 Apr 2026
- Last Reported
- 23 Jul 2026, 15:55
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS328797
BL26-AS
GH
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
1
Total IPs Monitored
1
Total Reports
1
Reports per IP
Network Context
This IP address belongs to BL26-AS (AS328797), which manages 1 IP addresses in our monitoring system. Out of these, 1 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
78
%
Global Threat Ranking
This IP is more threatening than 78% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 291,444 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
18
avg: 18
=
Network Comparison
Compared against 6 IPs in ASN 328797
Threat Level
8/10
network avg: 7.5
=
Total Reports
18
network avg: 8
++
Network BL26-AS has overall threat level 7/10
Geographic Comparison
Compared against 198 IPs in GH
Threat Level
8/10
country avg: 6.3
+
Total Reports
18
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
30 Jun 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Monday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
16
WP Login Brute Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
273,425 threat incidents tracked globally • Last 24h: 17,261 Logs
FEED
Top Threat Sources
-
01
United States61,499 22.5% -
02
India45,236 16.5% -
03
China34,040 12.4% -
04
Brazil14,652 5.4% -
05
Germany9,814 3.6% -
06
Singapore7,935 2.9% -
07
Indonesia7,832 2.9% -
08
Pakistan7,759 2.8% -
09
Russia6,143 2.2% -
10
Netherlands5,878 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
7.4/10
Avg Threat
34%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
4
Related IPs
7.5/10
Avg Threat
33%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
79%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
102.223.92.101
10/10
Confidence
100%
Reports
21
ISP
Koforidua-Techn...
102.176.81.29
8/10
Confidence
97%
Reports
26
ISP
VODAFONE GHANA ...
41.204.63.118
10/10
Confidence
92%
Reports
48
ISP
VODAFONE GHANA ...
41.242.115.83
10/10
Confidence
90%
Reports
120
ISP
Dolphin-Telecom-AS
102.176.82.190
8/10
Confidence
89%
Reports
20
ISP
VODAFONE GHANA ...
80.87.83.229
10/10
Confidence
87%
Reports
61
ISP
VODAFONE GHANA ...
41.242.115.84
10/10
Confidence
85%
Reports
105
ISP
Dolphin-Telecom-AS
102.22.27.146
10/10
Confidence
79%
Reports
77
ISP
dds55
41.66.194.51
10/10
Confidence
77%
Reports
48
ISP
VODAFONE GHANA ...
41.204.32.189
8/10
Confidence
77%
Reports
9
ISP
VODAFONE GHANA ...
169.255.56.175
10/10
Confidence
75%
Reports
58
ISP
HA-VPS-NET
41.66.220.84
8/10
Confidence
73%
Reports
26
ISP
VODAFONE GHANA ...
102.22.20.125
10/10
Confidence
62%
Reports
80
ISP
dds55
154.160.19.24
0/10
Confidence
53%
Reports
4
ISP
SCANCOM
102.222.172.46
8/10
Confidence
53%
Reports
4
ISP
Simba-Media-Ghana
IPs with similar threat level and confidence scores.
15
Related IPs
7.8/10
Avg Threat
43%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
45.33.68.66
10/10
Confidence
43%
Reports
48
Location
US
US
142.93.120.13
8/10
Confidence
43%
Reports
48
Location
US
US
83.118.47.249
10/10
Confidence
43%
Reports
46
Location
TH
TH
185.246.188.115
8/10
Confidence
43%
Reports
29
Location
NL
NL
103.109.188.214
8/10
Confidence
43%
Reports
26
Location
ID
ID
103.139.144.127
7/10
Confidence
43%
Reports
23
Location
BD
BD
146.70.40.70
7/10
Confidence
43%
Reports
22
Location
FR
FR
82.102.18.182
7/10
Confidence
43%
Reports
19
Location
FR
FR
47.93.233.71
7/10
Confidence
43%
Reports
18
Location
CN
CN
92.205.167.152
8/10
Confidence
43%
Reports
16
Location
FR
FR
3.12.12.136
7/10
Confidence
43%
Reports
16
Location
US
US
185.223.152.64
8/10
Confidence
43%
Reports
15
Location
US
US
54.206.20.150
7/10
Confidence
43%
Reports
15
Location
AU
AU
103.91.72.218
7/10
Confidence
43%
Reports
14
Location
IN
IN
43.230.92.32
8/10
Confidence
43%
Reports
14
Location
PK
PK
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13