Substantial Risk
Threat level 8/10 for 102.218.40.17 based on 29 documented incidents.
Consistent suspicious behavior patterns. 87% confidence rating.
More threatening than 90% of monitored IPs
IP Address
102.218.40.17
IPv4
Public
ZA
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
South Africa
Location
IIL3-AS
ASN 328942
29
Reports
Mixed
Data Source
Threat Categories
Brute-Force
21
Web App Attack
13
WP Login Brute Force
6
Port Scan
3
Hacking
3
WP XML-RPC Brute Force
3
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 days indicates persistent threat actor operations.
First Observed
13. October 2026
Last Activity
14. October 2026
Recent (7 days)
6 incidents
Reputable Network
This IP is hosted on a network (ASN 328942) with generally good reputation. The ISP IIL3-AS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Configure firewall rules and intrusion detection alerts.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
87%
Verified
Confidence History
28. May 2026 - 14. Oct 2026
87%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| New | Brute-Force Web App Attack | Honeypot | 75% |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Port Scan Hacking WP XML-RPC Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% |
Technical Details
Basic Information
- IP Address
- 102.218.40.17
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ZA
- ASN
- AS328942
- ISP
- IIL3-AS
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 28 May 2026
- Last Reported
- 14 Oct 2026, 19:13
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 869,546 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
29
avg: 9
++
Geographic Comparison
Compared against 4,000 IPs in ZA
Threat Level
8/10
country avg: 6.1
+
Total Reports
29
country avg: 2
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Oct 2026
4 reports
Daily Average
0.2
reports/day
Most Active
Tuesday
10 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
21
Web App Attack
13
WP Login Brute Force
6
Port Scan
3
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
790,082 threat incidents tracked globally • Last 24h: 28,038 Logs
FEED
Top Threat Sources
-
01
United States153,864 19.5% -
02
Brazil113,996 14.4%
-
03
India92,779 11.7%
-
04
China47,427 6%
-
05
SC29,287 3.7%
-
06
Germany19,337 2.4%
-
07
Pakistan19,065 2.4%
-
08
Netherlands18,631 2.4%
-
09
Argentina16,888 2.1%
-
10
Indonesia15,744 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
91%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
197.89.110.129
8/10
Confidence
100%
Reports
12
ISP
Dimension Data
4.221.186.70
10/10
Confidence
99%
Reports
26
ISP
MICROSOFT-CORP-...
102.206.236.210
8/10
Confidence
98%
Reports
15
ISP
Novasys IT (Pty...
172.209.208.96
10/10
Confidence
94%
Reports
43
ISP
Microsoft Corpo...
154.0.166.123
10/10
Confidence
94%
Reports
38
ISP
AFRIHOST SP (PT...
38.54.63.186
10/10
Confidence
93%
Reports
14
ISP
LIGHT NODE LIMITED
105.28.108.165
10/10
Confidence
90%
Reports
53
ISP
SEACOM-AS
41.77.205.15
10/10
Confidence
90%
Reports
11
ISP
Comtel Communic...
92.4.137.125
8/10
Confidence
90%
Reports
11
ISP
Oracle Corporation
102.210.149.105
10/10
Confidence
88%
Reports
168
ISP
KoTDA
102.212.64.41
10/10
Confidence
87%
Reports
58
ISP
Snowvalley Comm...
168.76.131.178
10/10
Confidence
86%
Reports
166
ISP
ASLINE LIMITED
165.16.180.249
8/10
Confidence
86%
Reports
22
ISP
SADV (Pty) Ltd
165.16.184.86
10/10
Confidence
86%
Reports
9
ISP
SADV (Pty) Ltd
165.16.185.86
10/10
Confidence
86%
Reports
9
ISP
SADV (Pty) Ltd
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
87%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
194.50.16.198
8/10
Confidence
87%
Reports
4,269
Location
NL
NL
192.161.49.2
8/10
Confidence
87%
Reports
6,036
Location
US
US
103.24.87.107
8/10
Confidence
87%
Reports
17
Location
IN
IN
195.184.76.73
10/10
Confidence
87%
Reports
234
Location
US
US
60.250.246.239
10/10
Confidence
87%
Reports
41
Location
TW
TW
93.123.109.101
8/10
Confidence
87%
Reports
82
Location
BG
BG
118.145.114.113
10/10
Confidence
87%
Reports
17
Location
CN
CN
203.192.249.105
8/10
Confidence
87%
Reports
27
Location
IN
IN
111.47.243.219
10/10
Confidence
87%
Reports
67
Location
CN
CN
209.87.169.163
10/10
Confidence
87%
Reports
19
Location
US
US
180.242.12.191
10/10
Confidence
87%
Reports
11
Location
ID
ID
177.10.203.106
10/10
Confidence
87%
Reports
22
Location
BR
BR
103.187.211.188
10/10
Confidence
87%
Reports
11
Location
IN
IN
198.12.148.211
8/10
Confidence
87%
Reports
19
Location
US
US
220.119.37.141
10/10
Confidence
87%
Reports
121
Location
KR
KR