Critical Alert
Security alert: 102.213.176.14 rated 10/10 based on 26 verified incidents.
Threat profile indicates sustained malicious activity with 83% confidence rating.
More threatening than 96% of monitored IPs
IP Address
102.213.176.14
IPv4
Public
KE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
KE
Location
TSL13-AS
ASN 329255
26
Reports
Mixed
Data Source
Threat Categories
Brute-Force
14
WP Login Brute Force
11
DDoS Attack
1
Hacking
1
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 weeks indicates persistent threat actor operations.
First Observed
14. July 2026
Last Activity
6. August 2026
Recent (7 days)
3 incidents
High-Risk Network Association
This IP belongs to a network (ASN 329255) with elevated threat levels. The ISP TSL13-AS hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
3/10
Low
Confidence Score
83%
Verified
Confidence History
18. Apr 2026 - 6. Aug 2026
83%
Current
Stable
Trend
Security Reports (26)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force | Community | 75% |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 102.213.176.14
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
KE
- ASN
- AS329255
- ISP
- TSL13-AS
DNS Information
- Reverse DNS
- ns-0-0-rt-1-mt6301-mba.telcoptics.co.ke
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 26
- First Reported
- 18 Apr 2026
- Last Reported
- 6 Aug 2026, 14:04
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS329255
TSL13-AS
KE
Network Threat Assessment
7/10
This network shows moderate threat levels with some malicious activity patterns.
Network Statistics
1
Total IPs Monitored
1
Total Reports
1
Reports per IP
Network Context
This IP address belongs to TSL13-AS (AS329255), which manages 1 IP addresses in our monitoring system. Out of these, 1 have been reported for suspicious activities, resulting in a network-wide threat level of 7/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
96
%
Global Threat Ranking
This IP is more threatening than 96% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 312,418 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
26
avg: 18
+
Network Comparison
Compared against 5 IPs in ASN 329255
Threat Level
10/10
network avg: 7.6
+
Total Reports
26
network avg: 9
++
Network TSL13-AS has overall threat level 7/10
Geographic Comparison
Compared against 737 IPs in KE
Threat Level
10/10
country avg: 6.4
++
Total Reports
26
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Jul 2026
3 reports
Daily Average
0.3
reports/day
Most Active
Tuesday
7 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
14
WP Login Brute Force
11
Hacking
1
DDoS Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 08:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
7/10
Avg Threat
47%
Avg Confidence
3
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
102.0.16.74
10/10
Confidence
100%
Reports
18
ISP
Airtel Networks...
197.248.89.127
8/10
Confidence
97%
Reports
26
ISP
Safaricom
197.232.63.170
10/10
Confidence
97%
Reports
14
ISP
JTL
102.219.210.254
8/10
Confidence
95%
Reports
12
ISP
VIJIJI CONNECT ...
41.89.227.164
10/10
Confidence
94%
Reports
19
ISP
Kenya Education...
197.248.207.139
10/10
Confidence
93%
Reports
57
ISP
Safaricom
41.215.45.30
8/10
Confidence
91%
Reports
214
ISP
ACCESSKENYA-KE ...
197.232.80.184
10/10
Confidence
89%
Reports
74
ISP
JTL
102.209.137.222
8/10
Confidence
89%
Reports
26
ISP
Yala-Kenya-Limited
105.27.148.94
10/10
Confidence
88%
Reports
95
ISP
SEACOM-AS
102.208.190.30
8/10
Confidence
88%
Reports
12
ISP
Telcoptics Solu...
102.204.91.110
8/10
Confidence
88%
Reports
10
ISP
VENNET SOLUTION...
197.231.178.154
8/10
Confidence
87%
Reports
26
ISP
FON
197.138.129.15
10/10
Confidence
86%
Reports
7
ISP
Kenya Education...
197.248.152.251
8/10
Confidence
85%
Reports
16
ISP
Safaricom Limited
IPs with similar threat level and confidence scores.
15
Related IPs
8.7/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
64.23.214.73
8/10
Confidence
83%
Reports
10,045
Location
US
US
137.184.32.56
8/10
Confidence
83%
Reports
10,034
Location
US
US
146.190.153.30
8/10
Confidence
83%
Reports
9,940
Location
US
US
24.199.126.56
8/10
Confidence
83%
Reports
9,923
Location
US
US
209.38.70.156
8/10
Confidence
83%
Reports
9,881
Location
US
US
143.198.225.197
8/10
Confidence
83%
Reports
9,347
Location
US
US
178.128.32.203
8/10
Confidence
83%
Reports
6,834
Location
GB
GB
176.65.149.55
10/10
Confidence
83%
Reports
5,528
Location
NL
NL
79.124.59.78
10/10
Confidence
83%
Reports
4,896
Location
BG
BG
2.57.121.25
10/10
Confidence
83%
Reports
3,676
Location
RO
RO
130.12.181.108
8/10
Confidence
83%
Reports
3,208
Location
DE
DE
130.12.181.100
8/10
Confidence
83%
Reports
3,068
Location
DE
DE
152.32.170.55
10/10
Confidence
83%
Reports
2,997
Location
HK
HK
137.184.190.246
8/10
Confidence
83%
Reports
2,905
Location
US
US
2.57.122.208
10/10
Confidence
83%
Reports
2,772
Location
RO
RO