Significant Threat
IP 102.221.29.106 identified as significant threat (8/10) from 7 events.
Multiple malicious indicators detected. Confidence level: 37%.
More threatening than 77% of monitored IPs
IP Address
102.221.29.106
IPv4
Public
GH
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Ghana
Location
BL26-AS
ASN 328797
7
Reports
Mixed
Data Source
Threat Categories
Brute-Force
6
WP Login Brute Force
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
9. July 2026
Last Activity
23. July 2026
Recent (7 days)
2 incidents
High-Risk Network Association
This IP belongs to a network (ASN 328797) with elevated threat levels. The ISP BL26-AS hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
4/10
Low
Confidence Score
33%
Medium Confidence
Confidence History
18. May 2026 - 23. Jul 2026
37%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 102.221.29.106
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
GH
- ASN
- AS328797
- ISP
- BL26-AS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 7
- First Reported
- 18 May 2026
- Last Reported
- 23 Jul 2026, 09:34
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS328797
BL26-AS
GH
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
1
Total IPs Monitored
1
Total Reports
1
Reports per IP
Network Context
This IP address belongs to BL26-AS (AS328797), which manages 1 IP addresses in our monitoring system. Out of these, 1 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
77
%
Global Threat Ranking
This IP is more threatening than 77% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 291,531 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
7
avg: 18
--
Network Comparison
Compared against 6 IPs in ASN 328797
Threat Level
8/10
network avg: 7.5
=
Total Reports
7
network avg: 8
-
Network BL26-AS has overall threat level 7/10
Geographic Comparison
Compared against 198 IPs in GH
Threat Level
8/10
country avg: 6.3
+
Total Reports
7
country avg: 5
+
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
9 Jul 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Monday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
6
WP Login Brute Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 15:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
273,495 threat incidents tracked globally • Last 24h: 17,131 Logs
FEED
Top Threat Sources
-
01
United States61,513 22.5% -
02
India45,249 16.5% -
03
China34,048 12.4% -
04
Brazil14,653 5.4% -
05
Germany9,818 3.6% -
06
Singapore7,936 2.9% -
07
Indonesia7,832 2.9% -
08
Pakistan7,761 2.8% -
09
Russia6,145 2.2% -
10
Netherlands5,886 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
5
Related IPs
7.4/10
Avg Threat
35%
Avg Confidence
5
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
4
Related IPs
7.5/10
Avg Threat
34%
Avg Confidence
4
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
79%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
102.223.92.101
10/10
Confidence
100%
Reports
21
ISP
Koforidua-Techn...
102.176.81.29
8/10
Confidence
97%
Reports
26
ISP
VODAFONE GHANA ...
41.204.63.118
10/10
Confidence
92%
Reports
48
ISP
VODAFONE GHANA ...
41.242.115.83
10/10
Confidence
90%
Reports
120
ISP
Dolphin-Telecom-AS
102.176.82.190
8/10
Confidence
89%
Reports
20
ISP
VODAFONE GHANA ...
80.87.83.229
10/10
Confidence
87%
Reports
61
ISP
VODAFONE GHANA ...
41.242.115.84
10/10
Confidence
85%
Reports
105
ISP
Dolphin-Telecom-AS
102.22.27.146
10/10
Confidence
79%
Reports
77
ISP
dds55
41.66.194.51
10/10
Confidence
77%
Reports
48
ISP
VODAFONE GHANA ...
41.204.32.189
8/10
Confidence
77%
Reports
9
ISP
VODAFONE GHANA ...
169.255.56.175
10/10
Confidence
75%
Reports
58
ISP
HA-VPS-NET
41.66.220.84
8/10
Confidence
73%
Reports
26
ISP
VODAFONE GHANA ...
102.22.20.125
10/10
Confidence
62%
Reports
80
ISP
dds55
154.160.19.24
0/10
Confidence
53%
Reports
4
ISP
SCANCOM
102.222.172.46
8/10
Confidence
53%
Reports
4
ISP
Simba-Media-Ghana
IPs with similar threat level and confidence scores.
15
Related IPs
8.3/10
Avg Threat
37%
Avg Confidence
14
High Threat
High-risk network: Majority of related IPs are flagged
161.97.163.144
10/10
Confidence
37%
Reports
48
Location
FR
FR
192.42.116.211
10/10
Confidence
37%
Reports
28
Location
NL
NL
114.119.154.124
8/10
Confidence
37%
Reports
26
Location
SG
SG
185.242.226.106
8/10
Confidence
37%
Reports
25
Location
US
US
103.169.160.74
10/10
Confidence
37%
Reports
20
Location
BD
BD
2a03:2880:f814:b::
8/10
Confidence
37%
Reports
18
Location
US
US
144.76.19.75
6/10
Confidence
37%
Reports
17
Location
DE
DE
157.90.6.50
7/10
Confidence
37%
Reports
16
Location
DE
DE
2a03:2880:f814:34::
8/10
Confidence
37%
Reports
16
Location
US
US
216.81.248.168
8/10
Confidence
37%
Reports
14
Location
US
US
197.148.40.111
7/10
Confidence
37%
Reports
14
Location
AO
AO
196.251.117.38
10/10
Confidence
37%
Reports
14
Location
NL
NL
138.199.35.10
8/10
Confidence
37%
Reports
13
Location
US
US
200.106.211.59
8/10
Confidence
37%
Reports
12
Location
BR
BR
34.142.251.255
8/10
Confidence
37%
Reports
11
Location
SG
SG
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13