Extreme Threat
IP 185.9.193.111 classified at threat level 10/10 with 48 documented attacks.
Advanced threat indicators confirmed with 71% certainty.
More threatening than 99% of monitored IPs
IP Address
185.9.193.111
IPv4
Public
ES
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
ES
Location
Nunsys SA
ASN 198479
48
Reports
Mixed
Data Source
Threat Categories
SSH
28
Hacking
10
Brute-Force
3
Exploited Host
2
Technical Details
SSH attacks attempt to gain server access through password guessing or exploitation of SSH vulnerabilities.
Recommended Mitigations
Use key-based authentication, change default ports, implement fail2ban, and disable root login.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
20. October 2026
Last Activity
1. November 2026
Recent (7 days)
1 incidents
High-Risk Network Association
This IP belongs to a network (ASN 198479) with elevated threat levels. The ISP Nunsys SA hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
2/10
Very Low
Confidence Score
70%
High Confidence
Confidence History
21. Apr 2026 - 1. Nov 2026
71%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Brute-Force | Community | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Hacking SSH | Honeypot x2 | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| Exploited Host | Honeypot | 75% | |
| SSH Hacking | Honeypot x2 | 75% | |
| SSH | Honeypot x2 | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% | |
| SSH | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 185.9.193.111
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
ES
- ASN
- AS198479
- ISP
- Nunsys SA
DNS Information
- Reverse DNS
- 193-9-185-111.nunsys.com
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 48
- First Reported
- 30 Mar 2026
- Last Reported
- 1 Nov 2026, 13:51
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS198479
Nunsys SA
ES
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
20
Total Reports
20
Reports per IP
Network Context
This IP address belongs to Nunsys SA (AS198479), which manages 1 IP addresses in our monitoring system. Out of these, 20 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,314,560 reported IPs worldwide
Threat Level
10/10
avg: 6.0
++
Total Reports
48
avg: 7
++
Network Comparison
Compared against 2 IPs in ASN 198479
Threat Level
10/10
network avg: 7.0
+
Total Reports
48
network avg: 25
++
Network Nunsys SA has overall threat level 8/10
Geographic Comparison
Compared against 4,740 IPs in ES
Threat Level
10/10
country avg: 6.1
++
Total Reports
48
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
20 Oct 2026
1 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
16 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
SSH
42
Hacking
19
Exploited Host
6
Brute-Force
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 7 reports
Weekly Activity
Geographic Threat Distribution
1,198,080 threat incidents tracked globally • Last 24h: 25,241 Logs
FEED
Top Threat Sources
-
01
Brazil260,703 21.8% -
02
United States204,139 17% -
03
India103,110 8.6% -
04
China50,316 4.2% -
05
Argentina42,342 3.5% -
06
SC29,427 2.5% -
07
Mexico27,819 2.3% -
08
Russia26,839 2.2% -
09
Colombia24,241 2% -
10
Germany23,809 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
1
Related IPs
4/10
Avg Threat
23%
Avg Confidence
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
83%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
113.30.149.218
10/10
Confidence
96%
Reports
16
ISP
Kamatera, Inc.
194.164.169.12
10/10
Confidence
91%
Reports
430
ISP
IONOS SE
154.58.4.13
7/10
Confidence
91%
Reports
21
ISP
Cogent Communic...
82.223.243.26
7/10
Confidence
90%
Reports
66
ISP
IONOS SE
85.58.136.104
10/10
Confidence
89%
Reports
14
ISP
Orange Espagne SA
2a0c:5a86:f608:1700:66c5:5530:a8e8:a68
10/10
Confidence
87%
Reports
13
ISP
Digi Spain Tele...
46.253.45.10
10/10
Confidence
83%
Reports
235
ISP
Gurbtec Iguana ...
79.116.142.18
10/10
Confidence
80%
Reports
14
ISP
Digi Spain Tele...
2a0c:5a83:f509:5a00:65c5:9c5d:c885:3f92
10/10
Confidence
80%
Reports
10
ISP
Digi Spain Tele...
46.24.47.94
10/10
Confidence
79%
Reports
159
ISP
Vodafone Spain
85.57.96.182
8/10
Confidence
79%
Reports
10
ISP
Orange Espagne SA
5.182.83.231
10/10
Confidence
78%
Reports
344
ISP
Avatel Telecom, SA
91.245.204.148
8/10
Confidence
72%
Reports
26
ISP
Avatel Telecom, SA
46.6.127.33
10/10
Confidence
72%
Reports
20
ISP
Xtra Telecom S.A.
185.174.182.226
10/10
Confidence
71%
Reports
13
ISP
Manuel Lozano Ruiz
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
71%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
59.153.151.173
10/10
Confidence
71%
Reports
6
Location
MY
MY
146.190.246.54
10/10
Confidence
71%
Reports
6
Location
CA
CA
129.121.143.66
10/10
Confidence
71%
Reports
8
Location
US
US
35.229.213.165
10/10
Confidence
71%
Reports
7
Location
TW
TW
189.165.14.0
10/10
Confidence
71%
Reports
11
Location
MX
MX
34.52.212.128
10/10
Confidence
71%
Reports
8
Location
BE
BE
118.196.8.203
10/10
Confidence
71%
Reports
6
Location
CN
CN
118.185.153.29
10/10
Confidence
71%
Reports
7
Location
IN
IN
181.23.35.195
10/10
Confidence
71%
Reports
7
Location
AR
AR
34.181.218.43
10/10
Confidence
71%
Reports
7
Location
US
US
34.146.85.181
10/10
Confidence
71%
Reports
6
Location
JP
JP
66.116.225.38
10/10
Confidence
71%
Reports
12
Location
IN
IN
152.236.14.137
10/10
Confidence
71%
Reports
6
Location
CA
CA
2001:df5:b9c0:33c2:3567:cd7e:7378:c388
10/10
Confidence
71%
Reports
7
Location
IN
IN
197.43.213.224
10/10
Confidence
71%
Reports
7
Location
EG
EG