Extreme Threat
IP 93.158.90.65 classified at threat level 10/10 with 5 documented attacks.
Advanced threat indicators confirmed with 42% certainty.
More threatening than 85% of monitored IPs
IP Address
93.158.90.65
IPv4
Public
SE
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
SE
Location
GlobalConnect AB
ASN 12552
5
Reports
Mixed
Data Source
Threat Categories
Web App Attack
3
DDoS Attack
2
WP Cron Abuse
2
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
31. May 2026
Last Activity
31. May 2026
Recent (7 days)
0 incidents
Moderate Network Risk
The network hosting this IP (ASN 12552, operated by GlobalConnect AB) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
38%
Medium Confidence
Confidence History
22. Jan 2026 - 31. May 2026
42%
Current
Stable
Trend
Security Reports (5)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% | |
| Web App Attack | Honeypot | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| WP Cron Abuse DDoS Attack | Community | 75% | |
| Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 93.158.90.65
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
SE
- ASN
- AS12552
- ISP
- GlobalConnect AB
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 5
- First Reported
- 22 Jan 2026
- Last Reported
- 31 May 2026, 05:18
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS12552
GlobalConnect AB
SE
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
68
Total IPs Monitored
271
Total Reports
4
Reports per IP
Network Context
This IP address belongs to GlobalConnect AB (AS12552), which manages 68 IP addresses in our monitoring system. Out of these, 271 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
85
%
Global Threat Ranking
This IP is more threatening than 85% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 199,796 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
5
avg: 23
--
Network Comparison
Compared against 68 IPs in ASN 12552
Threat Level
10/10
network avg: 3.9
++
Total Reports
5
network avg: 4
+
Network GlobalConnect AB has overall threat level 4/10
Geographic Comparison
Compared against 1,018 IPs in SE
Threat Level
10/10
country avg: 5.6
++
Total Reports
5
country avg: 19
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
31 May 2026
1 reports
Daily Average
0
reports/day
Most Active
Sunday
2 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Web App Attack
3
WP Cron Abuse
2
DDoS Attack
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
187,517 threat incidents tracked globally • Last 24h: 19,025 Logs
FEED
Top Threat Sources
-
01
United States38,480 20.5% -
02
India29,193 15.6% -
03
China26,035 13.9% -
04
Brazil10,259 5.5% -
05
Germany7,146 3.8% -
06
Singapore6,479 3.5% -
07
Indonesia5,557 3% -
08
Russia4,707 2.5% -
09
Pakistan4,689 2.5% -
10
Netherlands4,361 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
5.9/10
Avg Threat
46%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
93.158.91.250
10/10
Confidence
79%
Reports
16
Location
SE
SE
93.158.90.68
10/10
Confidence
66%
Reports
15
Location
SE
SE
93.158.90.67
10/10
Confidence
62%
Reports
6
Location
SE
SE
141.138.213.100
10/10
Confidence
60%
Reports
18
Location
PL
PL
93.158.98.56
10/10
Confidence
60%
Reports
18
Location
NO
NO
62.181.228.230
10/10
Confidence
59%
Reports
58
Location
SE
SE
62.181.214.210
10/10
Confidence
53%
Reports
4
Location
SE
SE
93.158.71.185
10/10
Confidence
47%
Reports
4
Location
SE
SE
93.158.90.70
0/10
Confidence
47%
Reports
3
Location
SE
SE
83.241.171.142
10/10
Confidence
46%
Reports
7
Location
SE
SE
93.158.90.69
0/10
Confidence
39%
Reports
4
Location
SE
SE
93.158.90.73
10/10
Confidence
38%
Reports
5
Location
SE
SE
93.158.90.74
10/10
Confidence
38%
Reports
3
Location
SE
SE
93.158.127.79
0/10
Confidence
37%
Reports
2
Location
NO
NO
93.158.90.31
0/10
Confidence
35%
Reports
2
Location
SE
SE
93.158.90.45
0/10
Confidence
35%
Reports
2
Location
SE
SE
141.138.211.251
0/10
Confidence
33%
Reports
2
Location
GB
GB
83.241.180.178
0/10
Confidence
30%
Reports
3
Location
SE
SE
93.158.91.33
0/10
Confidence
30%
Reports
2
Location
SE
SE
83.140.109.243
7/10
Confidence
30%
Reports
1
Location
NL
NL
IPs from the same subnet range, likely same network segment.
20
Related IPs
3.4/10
Avg Threat
35%
Avg Confidence
5
High Threat
Elevated risk: Multiple related IPs are flagged
93.158.90.68
10/10
Confidence
66%
Reports
15
Location
SE
SE
93.158.90.67
10/10
Confidence
62%
Reports
6
Location
SE
SE
93.158.90.70
0/10
Confidence
47%
Reports
3
Location
SE
SE
93.158.90.69
0/10
Confidence
39%
Reports
4
Location
SE
SE
93.158.90.73
10/10
Confidence
38%
Reports
5
Location
SE
SE
93.158.90.74
10/10
Confidence
38%
Reports
3
Location
SE
SE
93.158.90.31
0/10
Confidence
35%
Reports
2
Location
SE
SE
93.158.90.45
0/10
Confidence
35%
Reports
2
Location
SE
SE
93.158.90.166
0/10
Confidence
30%
Reports
1
Location
SE
SE
93.158.90.162
0/10
Confidence
30%
Reports
1
Location
SE
SE
93.158.90.12
0/10
Confidence
30%
Reports
1
Location
SE
SE
93.158.90.40
0/10
Confidence
30%
Reports
1
Location
SE
SE
93.158.90.153
0/10
Confidence
30%
Reports
1
Location
SE
SE
93.158.90.37
6/10
Confidence
28%
Reports
1
Location
SE
SE
93.158.90.30
6/10
Confidence
28%
Reports
1
Location
SE
SE
93.158.90.169
6/10
Confidence
28%
Reports
1
Location
SE
SE
93.158.90.71
10/10
Confidence
27%
Reports
3
Location
SE
SE
93.158.90.35
0/10
Confidence
23%
Reports
4
Location
SE
SE
93.158.90.136
0/10
Confidence
23%
Reports
3
Location
SE
SE
93.158.90.155
0/10
Confidence
23%
Reports
3
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.6/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
192.109.200.101
8/10
Confidence
100%
Reports
267
ISP
Pfcloud UG (haf...
192.176.172.166
8/10
Confidence
100%
Reports
248
ISP
Kepler Technolo...
83.68.248.161
10/10
Confidence
100%
Reports
94
ISP
Arkaden Konsult AB
171.25.158.58
10/10
Confidence
100%
Reports
56
ISP
Patrik Lagerman
4.225.39.110
10/10
Confidence
100%
Reports
53
ISP
Microsoft Corpo...
192.109.200.237
10/10
Confidence
100%
Reports
35
ISP
Pfcloud UG (haf...
171.25.158.24
10/10
Confidence
99%
Reports
71
ISP
Patrik Lagerman
171.25.158.82
10/10
Confidence
99%
Reports
67
ISP
Patrik Lagerman
171.25.158.80
10/10
Confidence
99%
Reports
37
ISP
Patrik Lagerman
90.143.178.70
10/10
Confidence
97%
Reports
26
ISP
Tele2 SWIPnet
195.47.238.177
10/10
Confidence
96%
Reports
131
ISP
No ACK Group Ho...
171.25.158.74
10/10
Confidence
96%
Reports
86
ISP
Patrik Lagerman
195.47.238.91
8/10
Confidence
96%
Reports
77
ISP
No ACK Group Ho...
171.25.158.70
10/10
Confidence
95%
Reports
124
ISP
Patrik Lagerman
185.246.128.133
10/10
Confidence
94%
Reports
5,119
ISP
w1n ltd
IPs with similar threat level and confidence scores.
15
Related IPs
7.8/10
Avg Threat
42%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
149.40.53.3
8/10
Confidence
42%
Reports
57
Location
US
US
106.75.153.165
10/10
Confidence
42%
Reports
54
Location
CN
CN
45.149.173.219
8/10
Confidence
42%
Reports
36
Location
US
US
103.253.244.95
8/10
Confidence
42%
Reports
35
Location
ID
ID
45.149.173.227
8/10
Confidence
42%
Reports
32
Location
US
US
188.54.60.95
7/10
Confidence
42%
Reports
25
Location
SA
SA
185.112.84.48
7/10
Confidence
42%
Reports
21
Location
IT
IT
185.177.72.10
8/10
Confidence
42%
Reports
19
Location
FR
FR
142.93.68.12
7/10
Confidence
42%
Reports
16
Location
US
US
2a09:bac5:49b:16aa::242:b1
7/10
Confidence
42%
Reports
16
Location
BD
BD
87.242.7.172
7/10
Confidence
42%
Reports
14
Location
HU
HU
124.107.20.111
7/10
Confidence
42%
Reports
13
Location
PH
PH
193.37.32.151
10/10
Confidence
42%
Reports
13
Location
SG
SG
23.239.110.139
8/10
Confidence
42%
Reports
13
Location
US
US
49.145.188.119
7/10
Confidence
42%
Reports
13
Location
PH
PH
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203