Extreme Threat
IP 102.213.34.99 classified at threat level 10/10 with 56 documented attacks.
Advanced threat indicators confirmed with 86% certainty.
More threatening than 97% of monitored IPs
IP Address
102.213.34.99
IPv4
Public
AO
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
AO
Location
NETSPACE
ASN 328154
56
Reports
Honeypot
Data Source
Threat Categories
SSH
28
Hacking
6
Exploited Host
3
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
High-Risk Network Association
This IP belongs to a network (ASN 328154) with elevated threat levels. The ISP NETSPACE hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
70%
High Confidence
Confidence History
17. Apr 2026 - 3. Jul 2026
86%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH Hacking Exploited Host | Honeypot x3 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 102.213.34.99
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
AO
- ASN
- AS328154
- ISP
- NETSPACE
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 56
- First Reported
- 8 Apr 2026
- Last Reported
- 3 Jul 2026, 05:46
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS328154
NETSPACE
AO
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
39
Total Reports
39
Reports per IP
Network Context
This IP address belongs to NETSPACE (AS328154), which manages 1 IP addresses in our monitoring system. Out of these, 39 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
97
%
Global Threat Ranking
This IP is more threatening than 97% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 312,479 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
56
avg: 18
++
Geographic Comparison
Compared against 183 IPs in AO
Threat Level
10/10
country avg: 6.4
++
Total Reports
56
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Thursday
18 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
52
Hacking
14
Exploited Host
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 05:00 with 8 reports
Weekly Activity
Geographic Threat Distribution
292,711 threat incidents tracked globally • Last 24h: 17,660 Logs
FEED
Top Threat Sources
-
01
United States65,787 22.5% -
02
India49,120 16.8%
-
03
China35,633 12.2%
-
04
Brazil15,556 5.3%
-
05
Germany10,500 3.6%
-
06
Pakistan8,479 2.9%
-
07
Indonesia8,404 2.9%
-
08
Singapore8,312 2.8%
-
09
Russia6,394 2.2%
-
10
Netherlands6,295 2.2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
82%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
102.219.126.124
10/10
Confidence
97%
Reports
20
ISP
ANGOLA-CABLES
41.63.170.188
10/10
Confidence
94%
Reports
60
ISP
TVCaboAngola
129.122.148.201
8/10
Confidence
89%
Reports
18
ISP
ZAP-Angola
196.249.229.22
10/10
Confidence
86%
Reports
82
ISP
MSTelcom
84.254.128.64
8/10
Confidence
86%
Reports
13
ISP
Skylogic S.p.A.
41.223.40.77
8/10
Confidence
86%
Reports
13
ISP
Angola Comunica...
154.127.254.98
8/10
Confidence
85%
Reports
22
ISP
TVCaboAngola
105.174.17.50
10/10
Confidence
82%
Reports
18
ISP
UNITEL
102.64.60.6
10/10
Confidence
80%
Reports
61
ISP
SpeedNet-Servicos
41.222.252.81
8/10
Confidence
80%
Reports
7
ISP
TV CABO ANGOLA LDA
154.116.240.3
10/10
Confidence
75%
Reports
11
ISP
CNTI-AS
102.219.126.32
10/10
Confidence
74%
Reports
55
ISP
ANGOLA-CABLES
102.130.192.63
10/10
Confidence
74%
Reports
32
ISP
ZAP-Angola
102.130.192.27
8/10
Confidence
68%
Reports
22
ISP
ZAP-Angola
105.174.31.210
10/10
Confidence
68%
Reports
8
ISP
UNITEL
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
95.214.52.233
10/10
Confidence
86%
Reports
3,597
Location
PL
PL
179.43.139.58
10/10
Confidence
86%
Reports
3,510
Location
CH
CH
5.61.209.224
10/10
Confidence
86%
Reports
3,035
Location
SC
SC
165.227.110.45
8/10
Confidence
86%
Reports
2,532
Location
US
US
165.227.188.42
8/10
Confidence
86%
Reports
2,530
Location
US
US
152.32.189.128
8/10
Confidence
86%
Reports
2,420
Location
HK
HK
152.32.189.121
10/10
Confidence
86%
Reports
2,383
Location
HK
HK
152.32.172.108
8/10
Confidence
86%
Reports
2,380
Location
HK
HK
137.184.112.103
8/10
Confidence
86%
Reports
2,367
Location
US
US
128.1.132.220
10/10
Confidence
86%
Reports
2,325
Location
HK
HK
155.138.210.119
10/10
Confidence
86%
Reports
1,539
Location
US
US
106.75.137.178
10/10
Confidence
86%
Reports
1,234
Location
CN
CN
2.57.122.96
10/10
Confidence
86%
Reports
1,017
Location
RO
RO
106.75.188.200
10/10
Confidence
86%
Reports
978
Location
CN
CN
103.56.148.184
10/10
Confidence
86%
Reports
918
Location
ID
ID