Critical Alert
Security alert: 92.191.96.115 rated 10/10 based on 38 verified incidents.
Threat profile indicates sustained malicious activity with 75% confidence rating.
More threatening than 93% of monitored IPs
IP Address
92.191.96.115
IPv4
Public
ES
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
ES
Location
Orange Espagne SA
ASN 12479
38
Reports
Honeypot
Data Source
Threat Categories
SSH
29
Hacking
2
Exploited Host
1
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Reputable Network
This IP is hosted on a network (ASN 12479) with generally good reputation. The ISP Orange Espagne SA maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
71%
High Confidence
Confidence History
22. Feb 2026 - 20. Mar 2026
75%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 92.191.96.115
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ES
- ASN
- AS12479
- ISP
- Orange Espagne SA
DNS Information
- Reverse DNS
- 115.96.191.92.dynamic.jazztel.es
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 38
- First Reported
- 20 Feb 2026
- Last Reported
- 20 Mar 2026, 03:52
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS12479
Orange Espagne SA
ES
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
27
Total IPs Monitored
384
Total Reports
14.2
Reports per IP
Network Context
This IP address belongs to Orange Espagne SA (AS12479), which manages 27 IP addresses in our monitoring system. Out of these, 384 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 199,723 reported IPs worldwide
Threat Level
10/10
avg: 5.3
++
Total Reports
38
avg: 23
++
Network Comparison
Compared against 49 IPs in ASN 12479
Threat Level
10/10
network avg: 5.6
++
Total Reports
38
network avg: 8
++
Network Orange Espagne SA has overall threat level 1/10
Geographic Comparison
Compared against 660 IPs in ES
Threat Level
10/10
country avg: 5.3
++
Total Reports
38
country avg: 15
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
37
Hacking
2
Exploited Host
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 07:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
187,378 threat incidents tracked globally • Last 24h: 18,990 Logs
FEED
Top Threat Sources
-
01
United States38,468 20.5% -
02
India29,138 15.6% -
03
China26,029 13.9% -
04
Brazil10,256 5.5% -
05
Germany7,144 3.8% -
06
Singapore6,476 3.5% -
07
Indonesia5,551 3% -
08
Russia4,703 2.5% -
09
Pakistan4,677 2.5% -
10
Netherlands4,358 2.3%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8/10
Avg Threat
62%
Avg Confidence
18
High Threat
High-risk network: Majority of related IPs are flagged
92.191.96.70
10/10
Confidence
97%
Reports
32
Location
ES
ES
80.102.218.187
10/10
Confidence
96%
Reports
40
Location
ES
ES
85.62.117.66
10/10
Confidence
90%
Reports
19
Location
ES
ES
85.62.117.67
8/10
Confidence
84%
Reports
11
Location
ES
ES
62.14.96.56
8/10
Confidence
73%
Reports
48
Location
ES
ES
92.191.96.171
8/10
Confidence
72%
Reports
25
Location
ES
ES
92.178.27.180
10/10
Confidence
66%
Reports
37
Location
ES
ES
92.187.232.117
8/10
Confidence
66%
Reports
9
Location
ES
ES
90.161.232.83
10/10
Confidence
62%
Reports
5
Location
ES
ES
85.61.90.129
8/10
Confidence
56%
Reports
6
Location
ES
ES
85.50.120.247
8/10
Confidence
55%
Reports
7
Location
ES
ES
90.175.168.82
8/10
Confidence
51%
Reports
8
Location
ES
ES
90.170.47.115
8/10
Confidence
50%
Reports
3
Location
ES
ES
90.160.60.168
10/10
Confidence
49%
Reports
5
Location
ES
ES
90.173.78.90
7/10
Confidence
49%
Reports
5
Location
ES
ES
87.219.197.26
8/10
Confidence
49%
Reports
5
Location
ES
ES
90.175.248.28
10/10
Confidence
48%
Reports
7
Location
ES
ES
92.189.225.181
0/10
Confidence
47%
Reports
3
Location
ES
ES
85.62.33.188
10/10
Confidence
41%
Reports
11
Location
ES
ES
85.62.29.213
0/10
Confidence
41%
Reports
3
Location
ES
ES
IPs from the same subnet range, likely same network segment.
2
Related IPs
9/10
Avg Threat
85%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
9.2/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
31.24.155.180
8/10
Confidence
100%
Reports
140
ISP
Axarnet Comunic...
82.223.24.195
8/10
Confidence
100%
Reports
117
ISP
IONOS SE
158.179.210.22
10/10
Confidence
100%
Reports
87
ISP
ORACLE-BMC-31898
31.24.44.107
8/10
Confidence
100%
Reports
85
ISP
Axarnet Comunic...
84.246.215.129
10/10
Confidence
100%
Reports
39
ISP
Axarnet Comunic...
185.167.90.252
10/10
Confidence
100%
Reports
27
ISP
Dimatica Servic...
82.165.2.98
8/10
Confidence
100%
Reports
26
ISP
IONOS SE
217.76.158.60
10/10
Confidence
100%
Reports
23
ISP
IONOS SE
212.89.15.132
8/10
Confidence
99%
Reports
237
ISP
R Cable y Telec...
81.60.209.168
10/10
Confidence
99%
Reports
101
ISP
Vodafone Spain
46.24.47.94
10/10
Confidence
99%
Reports
74
ISP
Vodafone Spain
77.74.229.158
8/10
Confidence
99%
Reports
60
ISP
Istqrar for Ser...
217.160.226.51
10/10
Confidence
99%
Reports
37
ISP
IONOS SE
94.143.141.37
10/10
Confidence
99%
Reports
29
ISP
IONOS SE
185.9.193.111
10/10
Confidence
98%
Reports
33
ISP
Nunsys SA
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
75%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
211.253.31.30
10/10
Confidence
75%
Reports
3,142
Location
KR
KR
185.156.73.62
8/10
Confidence
75%
Reports
2,865
Location
UA
UA
72.79.42.117
10/10
Confidence
75%
Reports
2,126
Location
US
US
103.132.243.250
10/10
Confidence
75%
Reports
2,030
Location
IN
IN
87.98.242.75
8/10
Confidence
75%
Reports
1,718
Location
DE
DE
80.94.92.66
10/10
Confidence
75%
Reports
1,652
Location
RO
RO
187.191.2.214
10/10
Confidence
75%
Reports
1,622
Location
MX
MX
45.142.193.233
8/10
Confidence
75%
Reports
1,503
Location
RO
RO
45.82.78.108
10/10
Confidence
75%
Reports
1,432
Location
DE
DE
157.20.207.165
10/10
Confidence
75%
Reports
1,354
Location
ID
ID
102.218.89.110
10/10
Confidence
75%
Reports
956
Location
UG
UG
85.217.140.13
8/10
Confidence
75%
Reports
944
Location
FR
FR
85.217.140.8
8/10
Confidence
75%
Reports
942
Location
FR
FR
170.39.218.32
10/10
Confidence
75%
Reports
915
Location
CA
CA
80.94.92.63
10/10
Confidence
75%
Reports
907
Location
RO
RO
Analyzed high-risk IP addresses
- 2.57.122.177
- 207.90.244.27
- 143.198.150.150
- 147.182.241.81
- 164.92.82.91
- 143.198.238.87
- 64.23.214.73
- 137.184.32.56
- 146.190.153.30
- 209.38.131.131
- 24.199.126.56
- 209.38.70.156
- 172.110.223.33
- 143.198.225.197
- 94.154.35.215
- 193.32.162.28
- 80.94.92.183
- 176.65.149.64
- 51.68.207.118
- 139.59.170.85
- 185.246.128.133
- 176.65.149.224
- 176.65.149.230
- 178.128.32.203