Notable Threat
IP 85.57.96.137 rated 8/10 from 11 verified reports.
Multiple security incidents attributed to this IP. Confidence: 97%.
More threatening than 90% of monitored IPs
IP Address
85.57.96.137
IPv4
Public
ES
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
Spain
Location
Orange Espagne SA
ASN 12479
11
Reports
Mixed
Data Source
Threat Categories
Brute-Force
9
Web App Attack
9
WP Login Brute Force
2
Technical Details
Brute-force attacks systematically attempt password combinations against authentication systems.
Recommended Mitigations
Implement rate limiting, account lockout policies, multi-factor authentication, and fail2ban.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 2 weeks indicates persistent threat actor operations.
First Observed
14. September 2026
Last Activity
29. September 2026
Recent (7 days)
7 incidents
Reputable Network
This IP is hosted on a network (ASN 12479) with generally good reputation. The ISP Orange Espagne SA maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
3/10
Low
Confidence Score
97%
Verified
Confidence History
14. Sep 2026 - 29. Sep 2026
97%
Current
Stable
Trend
Security Reports (11)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Community | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% | |
| Brute-Force Web App Attack | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 85.57.96.137
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ES
- ASN
- AS12479
- ISP
- Orange Espagne SA
DNS Information
- Reverse DNS
- 137.pool85-57-96.dynamic.orange.es
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 11
- First Reported
- 14 Sep 2026
- Last Reported
- 29 Sep 2026, 19:23
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS12479
Orange Espagne SA
ES
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
27
Total IPs Monitored
384
Total Reports
14.2
Reports per IP
Network Context
This IP address belongs to Orange Espagne SA (AS12479), which manages 27 IP addresses in our monitoring system. Out of these, 384 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
90
%
Global Threat Ranking
This IP is more threatening than 90% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 807,665 reported IPs worldwide
Threat Level
8/10
avg: 6.3
+
Total Reports
11
avg: 9
+
Network Comparison
Compared against 344 IPs in ASN 12479
Threat Level
8/10
network avg: 5.8
+
Total Reports
11
network avg: 2
++
Network Orange Espagne SA has overall threat level 1/10
Geographic Comparison
Compared against 3,353 IPs in ES
Threat Level
8/10
country avg: 6.2
+
Total Reports
11
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
14 Sep 2026
3 reports
Daily Average
0.4
reports/day
Most Active
Monday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
9
Web App Attack
9
WP Login Brute Force
2
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 14:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
734,267 threat incidents tracked globally • Last 24h: 27,957 Logs
FEED
Top Threat Sources
-
01
United States143,474 19.5% -
02
Brazil110,782 15.1%
-
03
India82,226 11.2%
-
04
China44,808 6.1%
-
05
SC29,234 4%
-
06
Germany17,516 2.4%
-
07
Netherlands17,495 2.4%
-
08
Pakistan16,666 2.3%
-
09
Argentina16,192 2.2%
-
10
Colombia15,136 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.5/10
Avg Threat
49%
Avg Confidence
17
High Threat
High-risk network: Majority of related IPs are flagged
85.52.96.253
10/10
Confidence
92%
Reports
13
Location
ES
ES
80.102.218.187
10/10
Confidence
88%
Reports
79
Location
ES
ES
90.162.116.66
10/10
Confidence
78%
Reports
13
Location
ES
ES
85.57.99.10
8/10
Confidence
67%
Reports
6
Location
ES
ES
89.128.44.92
8/10
Confidence
64%
Reports
8
Location
ES
ES
37.135.159.114
10/10
Confidence
62%
Reports
5
Location
ES
ES
85.52.96.175
10/10
Confidence
57%
Reports
6
Location
ES
ES
90.175.168.82
8/10
Confidence
51%
Reports
31
Location
ES
ES
87.219.197.128
8/10
Confidence
45%
Reports
8
Location
ES
ES
90.166.18.189
10/10
Confidence
45%
Reports
3
Location
ES
ES
62.37.210.30
10/10
Confidence
45%
Reports
3
Location
ES
ES
85.62.33.188
10/10
Confidence
43%
Reports
8
Location
ES
ES
188.78.22.255
8/10
Confidence
40%
Reports
3
Location
ES
ES
85.50.121.120
8/10
Confidence
37%
Reports
3
Location
ES
ES
37.15.156.23
8/10
Confidence
29%
Reports
3
Location
ES
ES
90.163.239.132
4/10
Confidence
28%
Reports
2
Location
ES
ES
90.166.18.129
7/10
Confidence
28%
Reports
1
Location
ES
ES
92.172.180.155
6/10
Confidence
26%
Reports
2
Location
ES
ES
89.131.17.39
10/10
Confidence
25%
Reports
3
Location
ES
ES
90.170.153.143
6/10
Confidence
25%
Reports
2
Location
ES
ES
IPs from the same country with similar threat profiles.
15
Related IPs
9.5/10
Avg Threat
85%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
158.158.37.2
8/10
Confidence
100%
Reports
14
ISP
Microsoft Corpo...
194.164.169.12
10/10
Confidence
94%
Reports
256
ISP
IONOS SE
85.52.96.253
10/10
Confidence
92%
Reports
13
ISP
Orange Espagne SA
80.102.218.187
10/10
Confidence
88%
Reports
79
ISP
Orange Espagne SA
185.214.101.139
10/10
Confidence
86%
Reports
22
ISP
Iomart Cloud Se...
178.60.63.113
8/10
Confidence
86%
Reports
12
ISP
R Cable y Telec...
46.253.45.10
10/10
Confidence
85%
Reports
206
ISP
Gurbtec Iguana ...
46.24.47.94
10/10
Confidence
85%
Reports
132
ISP
Vodafone Spain
79.116.218.205
8/10
Confidence
85%
Reports
10
ISP
Digi Spain Tele...
84.236.153.83
10/10
Confidence
83%
Reports
59
ISP
Aire Networks D...
84.236.153.81
10/10
Confidence
82%
Reports
57
ISP
Aire Networks D...
79.116.89.151
10/10
Confidence
81%
Reports
8
ISP
Digi Spain Tele...
77.229.68.86
10/10
Confidence
79%
Reports
51
ISP
Vodafone Spain
90.162.116.66
10/10
Confidence
78%
Reports
13
ISP
Orange Espagne SA
81.202.122.154
8/10
Confidence
77%
Reports
10
ISP
Vodafone Ono, S.A.
IPs with similar threat level and confidence scores.
15
Related IPs
9.2/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
195.178.110.217
10/10
Confidence
97%
Reports
413
Location
BG
BG
195.178.110.232
10/10
Confidence
97%
Reports
311
Location
BG
BG
213.147.113.186
10/10
Confidence
97%
Reports
73
Location
HR
HR
51.222.85.30
8/10
Confidence
97%
Reports
73
Location
CA
CA
103.79.90.26
10/10
Confidence
97%
Reports
44
Location
ID
ID
103.20.219.5
10/10
Confidence
97%
Reports
43
Location
ID
ID
91.244.197.105
10/10
Confidence
97%
Reports
30
Location
LT
LT
103.154.179.151
8/10
Confidence
97%
Reports
29
Location
ID
ID
5.146.111.129
8/10
Confidence
97%
Reports
29
Location
DE
DE
27.147.204.229
10/10
Confidence
97%
Reports
25
Location
BD
BD
86.98.149.138
8/10
Confidence
97%
Reports
24
Location
AE
AE
185.254.197.231
10/10
Confidence
97%
Reports
23
Location
UA
UA
186.18.175.212
8/10
Confidence
97%
Reports
22
Location
AR
AR
179.48.160.8
10/10
Confidence
97%
Reports
20
Location
BR
BR
112.211.157.177
8/10
Confidence
97%
Reports
20
Location
PH
PH