Significant Threat
IP 79.116.23.158 identified as significant threat (8/10) from 9 events.
Multiple malicious indicators detected. Confidence level: 73%.
More threatening than 79% of monitored IPs
IP Address
79.116.23.158
IPv4
Public
ES
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
ES
Location
Digi Spain Telecom S.A
ASN 57269
9
Reports
Honeypot
Data Source
Threat Categories
SSH
9
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
11. May 2026
Last Activity
26. May 2026
Recent (7 days)
0 incidents
Reputable Network
This IP is hosted on a network (ASN 57269) with generally good reputation. The ISP Digi Spain Telecom S.A maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Immediate monitoring recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
8/10
High
Confidence Score
63%
High Confidence
Confidence History
23. Apr 2026 - 26. May 2026
73%
Current
Stable
Trend
Security Reports (9)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 79.116.23.158
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ES
- ASN
- AS57269
- ISP
- Digi Spain Telecom S.A
DNS Information
- Reverse DNS
- 79-116-23-158.digimobil.es
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 9
- First Reported
- 23 Apr 2026
- Last Reported
- 26 May 2026, 12:21
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS57269
Digi Spain Telecom S.A
ES
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
25
Total IPs Monitored
97
Total Reports
3.9
Reports per IP
Network Context
This IP address belongs to Digi Spain Telecom S.A (AS57269), which manages 25 IP addresses in our monitoring system. Out of these, 97 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
79
%
Global Threat Ranking
This IP is more threatening than 79% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,496 reported IPs worldwide
Threat Level
8/10
avg: 5.3
++
Total Reports
9
avg: 23
--
Network Comparison
Compared against 90 IPs in ASN 57269
Threat Level
8/10
network avg: 5.3
++
Total Reports
9
network avg: 2
++
Network Digi Spain Telecom S.A has overall threat level 2/10
Geographic Comparison
Compared against 660 IPs in ES
Threat Level
8/10
country avg: 5.3
++
Total Reports
9
country avg: 15
-
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 May 2026
4 reports
Daily Average
0.2
reports/day
Most Active
Tuesday
5 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
9
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 2 reports
Weekly Activity
Geographic Threat Distribution
187,140 threat incidents tracked globally • Last 24h: 19,043 Logs
FEED
Top Threat Sources
-
01
United States38,446 20.5% -
02
India29,023 15.5% -
03
China26,021 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,142 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,539 3% -
08
Russia4,703 2.5% -
09
Pakistan4,654 2.5% -
10
Netherlands4,356 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
6.6/10
Avg Threat
54%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
79.116.52.1
10/10
Confidence
98%
Reports
26
Location
ES
ES
86.127.253.22
8/10
Confidence
91%
Reports
18
Location
ES
ES
79.117.13.194
8/10
Confidence
79%
Reports
9
Location
ES
ES
86.127.231.225
8/10
Confidence
77%
Reports
12
Location
ES
ES
79.112.96.62
8/10
Confidence
61%
Reports
5
Location
ES
ES
79.117.28.5
8/10
Confidence
61%
Reports
5
Location
ES
ES
79.116.50.123
8/10
Confidence
55%
Reports
4
Location
ES
ES
86.127.242.164
0/10
Confidence
55%
Reports
4
Location
ES
ES
79.112.121.72
8/10
Confidence
50%
Reports
3
Location
ES
ES
79.116.201.56
0/10
Confidence
50%
Reports
3
Location
ES
ES
79.117.24.180
8/10
Confidence
48%
Reports
3
Location
ES
ES
2a0c:5a86:f10d:9300:15e0:8ee7:e5eb:4dcd
8/10
Confidence
44%
Reports
3
Location
ES
ES
79.116.89.28
7/10
Confidence
40%
Reports
2
Location
ES
ES
2a0c:5a84:b505:d800:14f8:5925:b189:2eef
7/10
Confidence
40%
Reports
2
Location
ES
ES
79.116.67.219
7/10
Confidence
39%
Reports
2
Location
ES
ES
79.112.97.188
7/10
Confidence
39%
Reports
2
Location
ES
ES
86.127.241.199
0/10
Confidence
39%
Reports
2
Location
ES
ES
86.127.225.252
7/10
Confidence
38%
Reports
2
Location
ES
ES
79.116.69.60
7/10
Confidence
38%
Reports
1
Location
ES
ES
79.117.34.158
7/10
Confidence
35%
Reports
2
Location
ES
ES
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
31.24.155.180
8/10
Confidence
100%
Reports
140
ISP
Axarnet Comunic...
82.223.24.195
8/10
Confidence
100%
Reports
117
ISP
IONOS SE
158.179.210.22
10/10
Confidence
100%
Reports
87
ISP
ORACLE-BMC-31898
31.24.44.107
8/10
Confidence
100%
Reports
85
ISP
Axarnet Comunic...
84.246.215.129
10/10
Confidence
100%
Reports
38
ISP
Axarnet Comunic...
185.167.90.252
10/10
Confidence
100%
Reports
27
ISP
Dimatica Servic...
82.165.2.98
8/10
Confidence
100%
Reports
26
ISP
IONOS SE
217.76.158.60
10/10
Confidence
100%
Reports
23
ISP
IONOS SE
212.89.15.132
8/10
Confidence
99%
Reports
237
ISP
R Cable y Telec...
81.60.209.168
10/10
Confidence
99%
Reports
101
ISP
Vodafone Spain
46.24.47.94
10/10
Confidence
99%
Reports
74
ISP
Vodafone Spain
77.74.229.158
8/10
Confidence
99%
Reports
60
ISP
Istqrar for Ser...
217.160.226.51
10/10
Confidence
99%
Reports
37
ISP
IONOS SE
94.143.141.37
10/10
Confidence
99%
Reports
29
ISP
IONOS SE
185.9.193.111
10/10
Confidence
98%
Reports
33
ISP
Nunsys SA
IPs with similar threat level and confidence scores.
15
Related IPs
9.7/10
Avg Threat
73%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
92.118.39.62
10/10
Confidence
73%
Reports
12,949
Location
US
US
45.148.10.240
10/10
Confidence
73%
Reports
9,300
Location
NL
NL
92.63.197.23
8/10
Confidence
73%
Reports
2,509
Location
UA
UA
85.158.110.210
8/10
Confidence
73%
Reports
2,258
Location
NL
NL
138.68.155.239
10/10
Confidence
73%
Reports
1,990
Location
GB
GB
45.82.78.100
10/10
Confidence
73%
Reports
1,965
Location
DE
DE
170.254.229.191
10/10
Confidence
73%
Reports
1,164
Location
CO
CO
78.153.140.93
10/10
Confidence
73%
Reports
1,135
Location
GB
GB
204.76.203.30
10/10
Confidence
73%
Reports
1,123
Location
NL
NL
179.32.33.161
10/10
Confidence
73%
Reports
941
Location
CO
CO
85.217.149.25
10/10
Confidence
73%
Reports
921
Location
CA
CA
36.104.144.114
10/10
Confidence
73%
Reports
874
Location
CN
CN
94.102.49.155
10/10
Confidence
73%
Reports
833
Location
NL
NL
103.69.189.95
10/10
Confidence
73%
Reports
760
Location
VN
VN
78.153.140.156
10/10
Confidence
73%
Reports
748
Location
GB
GB
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203