Extreme Threat
IP 102.201.211.19 classified at threat level 10/10 with 11 documented attacks.
Advanced threat indicators confirmed with 90% certainty.
More threatening than 100% of monitored IPs
IP Address
102.201.211.19
IPv4
Public
KE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Kenya
Location
NEXT THING NETWORKS Limit...
ASN 329261
11
Reports
Mixed
Data Source
Threat Categories
Brute-Force
11
Web App Attack
10
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 days indicates persistent threat actor operations.
First Observed
30. September 2026
Last Activity
3. October 2026
Recent (7 days)
11 incidents
Reputable Network
This IP is hosted on a network (ASN 329261) with generally good reputation. The ISP NEXT THING NETWORKS Limited maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
8/10
High
Confidence Score
90%
Verified
Confidence History
30. Sep 2026 - 3. Oct 2026
90%
Current
Stable
Trend
Security Reports (11)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Community x2 | 75% |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% |
Technical Details
Basic Information
- IP Address
- 102.201.211.19
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KE
- ASN
- AS329261
- ISP
- NEXT THING NETWORKS Limited
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 11
- First Reported
- 30 Sep 2026
- Last Reported
- 3 Oct 2026, 13:49
Comparative Analysis
How this IP compares to others in our threat intelligence database
100
%
Global Threat Ranking
This IP is more threatening than 100% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 818,110 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
11
avg: 9
+
Network Comparison
Compared against 4 IPs in ASN 329261
Threat Level
10/10
network avg: 8.0
+
Total Reports
11
network avg: 34
--
Geographic Comparison
Compared against 1,833 IPs in KE
Threat Level
10/10
country avg: 6.2
++
Total Reports
11
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
3 Oct 2026
4 reports
Daily Average
0.4
reports/day
Most Active
Saturday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
11
Web App Attack
10
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
743,652 threat incidents tracked globally • Last 24h: 30,516 Logs
FEED
Top Threat Sources
-
01
United States145,500 19.6% -
02
Brazil111,237 15%
-
03
India84,253 11.3%
-
04
China45,407 6.1%
-
05
SC29,244 3.9%
-
06
Germany17,848 2.4%
-
07
Netherlands17,642 2.4%
-
08
Pakistan17,153 2.3%
-
09
Argentina16,224 2.2%
-
10
Colombia15,155 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
3
Related IPs
7.3/10
Avg Threat
29%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.6/10
Avg Threat
92%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
102.210.42.21
8/10
Confidence
100%
Reports
19
ISP
Skylink Network...
41.203.213.8
10/10
Confidence
97%
Reports
16
ISP
Safaricom
143.105.27.175
10/10
Confidence
93%
Reports
38
ISP
Space Explorati...
197.248.206.123
8/10
Confidence
93%
Reports
18
ISP
Safaricom Limited
197.248.12.28
8/10
Confidence
93%
Reports
17
ISP
Safaricom Limited
2605:59c1:449f:3a08:a3bf:e552:b822:8740
10/10
Confidence
93%
Reports
14
ISP
Space Explorati...
105.163.0.76
8/10
Confidence
93%
Reports
11
ISP
Safaricom Limited
2605:59c1:4454:fa08:b726:7606:6aa2:1004
8/10
Confidence
92%
Reports
13
ISP
Space Explorati...
102.219.208.66
7/10
Confidence
92%
Reports
10
ISP
VIJIJI CONNECT ...
197.248.207.142
8/10
Confidence
90%
Reports
15
ISP
Safaricom Limited
102.220.23.148
10/10
Confidence
90%
Reports
15
ISP
THE KONZA TECHN...
102.0.36.10
8/10
Confidence
89%
Reports
12
ISP
Airtel Networks...
41.89.96.242
8/10
Confidence
89%
Reports
11
ISP
Kenya Education...
197.232.63.170
10/10
Confidence
87%
Reports
54
ISP
JTL
41.89.234.2
8/10
Confidence
87%
Reports
17
ISP
Kenya Education...
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
90%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.161.49.2
8/10
Confidence
90%
Reports
5,456
Location
US
US
103.95.207.141
10/10
Confidence
90%
Reports
578
Location
US
US
36.33.167.165
10/10
Confidence
90%
Reports
395
Location
CN
CN
221.228.203.3
10/10
Confidence
90%
Reports
393
Location
CN
CN
117.81.212.152
10/10
Confidence
90%
Reports
388
Location
CN
CN
101.89.141.184
10/10
Confidence
90%
Reports
386
Location
CN
CN
125.124.226.217
10/10
Confidence
90%
Reports
377
Location
CN
CN
158.94.209.22
8/10
Confidence
90%
Reports
320
Location
NL
NL
176.65.149.236
8/10
Confidence
90%
Reports
281
Location
NL
NL
91.196.152.51
10/10
Confidence
90%
Reports
186
Location
FR
FR
91.196.152.83
10/10
Confidence
90%
Reports
170
Location
FR
FR
91.196.152.226
10/10
Confidence
90%
Reports
170
Location
FR
FR
91.196.152.158
10/10
Confidence
90%
Reports
169
Location
FR
FR
91.196.152.56
8/10
Confidence
90%
Reports
168
Location
FR
FR
91.196.152.84
10/10
Confidence
90%
Reports
165
Location
FR
FR