Elevated Risk
Elevated threat level 8/10 for IP 5.225.77.139 from 14 reported incidents.
Behavioral profile indicates cyber threat activity with 93% confidence.
More threatening than 81% of monitored IPs
IP Address
5.225.77.139
IPv4
Public
ES
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
ES
Location
Vodafone Spain
ASN 12430
14
Reports
Honeypot
Data Source
Threat Categories
SSH
14
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 3 days indicates persistent threat actor operations.
First Observed
11. May 2026
Last Activity
14. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 12430) with generally good reputation. The ISP Vodafone Spain maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
82%
Verified
Confidence History
22. Apr 2026 - 14. May 2026
93%
Current
Stable
Trend
Security Reports (14)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 5.225.77.139
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ES
- ASN
- AS12430
- ISP
- Vodafone Spain
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 14
- First Reported
- 22 Apr 2026
- Last Reported
- 14 May 2026, 04:09
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS12430
Vodafone Spain
ES
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
24
Total IPs Monitored
235
Total Reports
9.8
Reports per IP
Network Context
This IP address belongs to Vodafone Spain (AS12430), which manages 24 IP addresses in our monitoring system. Out of these, 235 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
81
%
Global Threat Ranking
This IP is more threatening than 81% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,576 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
14
avg: 23
-
Network Comparison
Compared against 32 IPs in ASN 12430
Threat Level
8/10
network avg: 4.9
++
Total Reports
14
network avg: 12
+
Network Vodafone Spain has overall threat level 1/10
Geographic Comparison
Compared against 660 IPs in ES
Threat Level
8/10
country avg: 5.3
++
Total Reports
14
country avg: 15
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
11 May 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Thursday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
14
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
187,273 threat incidents tracked globally • Last 24h: 18,965 Logs
FEED
Top Threat Sources
-
01
United States38,457 20.5% -
02
India29,090 15.5% -
03
China26,027 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,143 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,543 3% -
08
Russia4,703 2.5% -
09
Pakistan4,670 2.5% -
10
Netherlands4,357 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.9/10
Avg Threat
67%
Avg Confidence
16
High Threat
High-risk network: Majority of related IPs are flagged
81.60.209.168
10/10
Confidence
99%
Reports
101
Location
ES
ES
46.24.47.94
10/10
Confidence
99%
Reports
74
Location
ES
ES
212.73.52.194
8/10
Confidence
96%
Reports
17
Location
ES
ES
212.73.46.196
8/10
Confidence
89%
Reports
13
Location
ES
ES
77.228.19.128
8/10
Confidence
83%
Reports
10
Location
ES
ES
47.62.4.38
8/10
Confidence
80%
Reports
11
Location
ES
ES
95.63.176.27
10/10
Confidence
76%
Reports
14
Location
ES
ES
81.60.215.62
8/10
Confidence
75%
Reports
7
Location
ES
ES
46.26.43.117
10/10
Confidence
74%
Reports
45
Location
ES
ES
37.222.188.4
8/10
Confidence
61%
Reports
5
Location
ES
ES
46.26.131.189
10/10
Confidence
60%
Reports
6
Location
ES
ES
81.60.234.131
8/10
Confidence
59%
Reports
8
Location
ES
ES
47.62.234.177
8/10
Confidence
58%
Reports
9
Location
ES
ES
81.60.214.13
8/10
Confidence
56%
Reports
8
Location
ES
ES
5.224.251.45
0/10
Confidence
55%
Reports
4
Location
ES
ES
188.85.138.120
8/10
Confidence
54%
Reports
5
Location
ES
ES
47.62.4.175
0/10
Confidence
47%
Reports
3
Location
ES
ES
47.59.205.33
7/10
Confidence
40%
Reports
2
Location
ES
ES
77.228.146.66
0/10
Confidence
40%
Reports
2
Location
ES
ES
47.59.203.226
0/10
Confidence
39%
Reports
2
Location
ES
ES
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
31.24.155.180
8/10
Confidence
100%
Reports
140
ISP
Axarnet Comunic...
82.223.24.195
8/10
Confidence
100%
Reports
117
ISP
IONOS SE
158.179.210.22
10/10
Confidence
100%
Reports
87
ISP
ORACLE-BMC-31898
31.24.44.107
8/10
Confidence
100%
Reports
85
ISP
Axarnet Comunic...
84.246.215.129
10/10
Confidence
100%
Reports
39
ISP
Axarnet Comunic...
185.167.90.252
10/10
Confidence
100%
Reports
27
ISP
Dimatica Servic...
82.165.2.98
8/10
Confidence
100%
Reports
26
ISP
IONOS SE
217.76.158.60
10/10
Confidence
100%
Reports
23
ISP
IONOS SE
212.89.15.132
8/10
Confidence
99%
Reports
237
ISP
R Cable y Telec...
81.60.209.168
10/10
Confidence
99%
Reports
101
ISP
Vodafone Spain
46.24.47.94
10/10
Confidence
99%
Reports
74
ISP
Vodafone Spain
77.74.229.158
8/10
Confidence
99%
Reports
60
ISP
Istqrar for Ser...
217.160.226.51
10/10
Confidence
99%
Reports
37
ISP
IONOS SE
94.143.141.37
10/10
Confidence
99%
Reports
29
ISP
IONOS SE
185.9.193.111
10/10
Confidence
98%
Reports
33
ISP
Nunsys SA
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
176.65.149.31
10/10
Confidence
93%
Reports
4,020
Location
NL
NL
45.205.1.5
10/10
Confidence
93%
Reports
2,951
Location
MU
MU
46.151.178.13
8/10
Confidence
93%
Reports
2,753
Location
NL
NL
200.124.160.2
10/10
Confidence
93%
Reports
2,116
Location
MX
MX
80.66.83.43
10/10
Confidence
93%
Reports
1,976
Location
RU
RU
130.12.181.98
8/10
Confidence
93%
Reports
1,224
Location
DE
DE
91.92.240.13
8/10
Confidence
93%
Reports
841
Location
DE
DE
5.83.143.40
10/10
Confidence
93%
Reports
823
Location
NL
NL
160.119.76.4
8/10
Confidence
93%
Reports
820
Location
SC
SC
103.56.148.184
10/10
Confidence
93%
Reports
634
Location
ID
ID
185.224.128.16
10/10
Confidence
93%
Reports
609
Location
NL
NL
185.156.73.157
10/10
Confidence
93%
Reports
525
Location
UA
UA
80.94.95.83
10/10
Confidence
93%
Reports
488
Location
RO
RO
154.239.6.163
8/10
Confidence
93%
Reports
470
Location
EG
EG
5.83.143.80
10/10
Confidence
93%
Reports
461
Location
NL
NL
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203