IP Address

102.217.42.136

IPv4 Public
ZA ZA
AS37053
RSAWEB (PTY) LTD
24 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
92% Confidence
24 Reports
Is this your IP address? If the cause is fixed, you can request removal. Free of charge, usually decided within 48 hours. Request delisting

Threat Intelligence Analysis

Automated assessment based on aggregated, anonymized threat data

Top 10% High Threat
ZA
South Africa Location
RSAWEB (PTY) LTD ASN 37053
24 Reports
Honeypot Data Source

Substantial Risk

Threat level 8/10 for 102.217.42.136 based on 24 documented incidents.

Consistent suspicious behavior patterns. 92% confidence rating.

More threatening than 90% of monitored IPs

Threat Categories

Brute-Force 24
SSH 24

Technical Details

Brute-force attacks systematically attempt password combinations against authentication systems.

Recommended Mitigations

Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.

Behavioral Analysis

Activity Pattern: Recent Spike

Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.

First Observed 5. September 2026
Last Activity 14. September 2026
Recent (7 days) 0 incidents

Moderate Network Risk

The network hosting this IP (ASN 37053, operated by RSAWEB (PTY) LTD) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.

Consider the network context when assessing this individual IP.

Security Recommendations

Configure firewall rules and intrusion detection alerts.

Immediate monitoring recommended.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 1/10 Very Low
Confidence Score 92% Verified

Confidence History

5. Sep 2026 - 14. Sep 2026
92% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (24)

Date Categories Source Confidence
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot x2 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
Brute-Force SSH Honeypot 75%
10 of 24 shown

Technical Details

Basic Information

IP Address
102.217.42.136
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
ZA ZA
ASN
AS37053
ISP
RSAWEB (PTY) LTD

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
24
First Reported
5 Sep 2026
Last Reported
14 Sep 2026, 13:18

Network Reputation

Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.

Network Identity

AS37053
RSAWEB Internet Services
ZA ZA

Network Threat Assessment

4/10
This network has low threat indicators with minimal suspicious activity.

Network Statistics

4
Total IPs Monitored
24
Total Reports
6
Reports per IP

Network Context

This IP address belongs to RSAWEB Internet Services (AS37053), which manages 4 IP addresses in our monitoring system. Out of these, 24 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.

Network notice: This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.

Comparative Analysis

How this IP compares to others in our threat intelligence database

90 %

Global Threat Ranking

This IP is more threatening than 90% of all IPs in our database.

Top 10% Most Dangerous

Global Comparison

Compared against 806,794 reported IPs worldwide

Threat Level 8/10 avg: 6.3 +
Total Reports 24 avg: 9 ++

Network Comparison

Compared against 31 IPs in ASN 37053

Threat Level 8/10 network avg: 5.8 +
Total Reports 24 network avg: 2 ++
Network RSAWEB (PTY) LTD has overall threat level 4/10

Geographic Comparison

Compared against 3,575 IPs in ZA

Threat Level 8/10 country avg: 6.0 +
Total Reports 24 country avg: 2 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

733,697 threat incidents tracked globally • Last 24h: 28,509 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    143,335 19.5%
  2. 02
    BR
    Brazil BR
    110,766 15.1%
  3. 03
    IN
    India IN
    82,129 11.2%
  4. 04
    CN
    China CN
    44,774 6.1%
  5. 05
    SC
    SC SC
    29,233 4%
  6. 06
    DE
    Germany DE
    17,494 2.4%
  7. 07
    NL
    Netherlands NL
    17,477 2.4%
  8. 08
    PK
    Pakistan PK
    16,649 2.3%
  9. 09
    AR
    Argentina AR
    16,190 2.2%
  10. 10
    CO
    Colombia CO
    15,135 2.1%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

IPs from the same country with similar threat profiles.

15 Related IPs
9.3/10 Avg Threat
88% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
102.212.64.41 10/10
Confidence 100%
Reports 58
ISP Snowvalley Comm...
24 Sep 2026
4.221.186.70 10/10
Confidence 100%
Reports 26
ISP MICROSOFT-CORP-...
30 Sep 2026
172.209.208.96 10/10
Confidence 94%
Reports 29
ISP Microsoft Corpo...
25 Sep 2026
41.198.165.79 8/10
Confidence 91%
Reports 12
ISP Echotel Pty Ltd
30 Sep 2026
102.210.149.105 10/10
Confidence 88%
Reports 147
ISP KoTDA
30 Sep 2026
4.221.162.168 10/10
Confidence 88%
Reports 76
ISP MICROSOFT-CORP-...
29 Sep 2026
102.210.148.92 10/10
Confidence 87%
Reports 173
ISP KoTDA
1 Oct 2026
102.39.94.34 8/10
Confidence 87%
Reports 19
ISP Vox Telecom Ltd
24 Sep 2026
168.76.131.178 10/10
Confidence 86%
Reports 144
ISP ASLINE LIMITED
30 Sep 2026
41.193.100.133 10/10
Confidence 85%
Reports 10
ISP Vox Telecom Ltd
30 Sep 2026
160.119.220.2 10/10
Confidence 84%
Reports 14
ISP SAINT ICT CONSU...
12 Sep 2026
102.223.241.222 8/10
Confidence 84%
Reports 13
ISP RMS Powertronic...
13 Sep 2026
41.193.190.161 8/10
Confidence 84%
Reports 9
ISP Vox Telecom Ltd
22 Sep 2026
41.181.156.205 10/10
Confidence 82%
Reports 61
ISP MTN Business So...
30 Sep 2026
165.16.180.249 8/10
Confidence 82%
Reports 17
ISP SADV (Pty) Ltd
21 Sep 2026

IPs with similar threat level and confidence scores.

15 Related IPs
9.3/10 Avg Threat
92% Avg Confidence
15 High Threat
High-risk network: Majority of related IPs are flagged
88.119.170.179 10/10
Confidence 92%
Reports 580
Location NL NL
16 Sep 2026
103.99.179.204 8/10
Confidence 92%
Reports 422
Location US US
16 Sep 2026
80.94.92.234 10/10
Confidence 92%
Reports 273
Location RO RO
30 Sep 2026
89.248.172.14 10/10
Confidence 92%
Reports 226
Location NL NL
30 Sep 2026
37.187.197.110 8/10
Confidence 92%
Reports 220
Location FR FR
19 Sep 2026
91.196.152.50 8/10
Confidence 92%
Reports 182
Location FR FR
1 Oct 2026
91.196.152.154 10/10
Confidence 92%
Reports 168
Location FR FR
30 Sep 2026
91.196.152.230 10/10
Confidence 92%
Reports 164
Location FR FR
30 Sep 2026
91.196.152.84 10/10
Confidence 92%
Reports 164
Location FR FR
1 Oct 2026
91.196.152.62 10/10
Confidence 92%
Reports 163
Location FR FR
30 Sep 2026
162.217.103.70 8/10
Confidence 92%
Reports 162
Location US US
1 Oct 2026
91.196.152.164 10/10
Confidence 92%
Reports 152
Location FR FR
29 Sep 2026
91.196.152.52 10/10
Confidence 92%
Reports 152
Location FR FR
1 Oct 2026
91.196.152.77 10/10
Confidence 92%
Reports 147
Location FR FR
30 Sep 2026
91.196.152.227 8/10
Confidence 92%
Reports 145
Location FR FR
30 Sep 2026

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "102.217.42.136",
    "threat_level": 8,
    "confidence_score": 92,
    "total_reports": 24,
    "country_code": "ZA",
    "isp_name": "RSAWEB (PTY) LTD",
    "asn": "37053",
    "first_reported": "2026-09-05 16:28:06",
    "last_reported": "2026-09-14 13:18:35",
    "exported_at": "2026-10-01T03:45:38+02:00",
    "source": "https://reportedip.com/ip/102.217.42.136/"
}
Download JSON

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.

Analyzed high-risk IP addresses