Notable Threat
IP 93.158.120.221 rated 7/10 from 2 verified reports.
Multiple security incidents attributed to this IP. Confidence: 33%.
More threatening than 84% of monitored IPs
IP Address
93.158.120.221
IPv4
Public
ES
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Spain
Location
GlobalConnect AB
ASN 12552
2
Reports
Honeypot
Data Source
Threat Categories
Web App Attack
1
Exploited Host
1
Technical Details
Web application attacks target vulnerabilities like XSS, CSRF, file inclusion, and other OWASP Top 10 issues.
Recommended Mitigations
Deploy web application firewalls, keep applications updated, and conduct regular security audits.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
4. October 2026
Last Activity
4. October 2026
Recent (7 days)
1 incidents
Moderate Network Risk
The network hosting this IP (ASN 12552, operated by GlobalConnect AB) shows moderate threat indicators. Some concerning activity has been detected from neighboring addresses.
Consider the network context when assessing this individual IP.
Security Recommendations
Implement appropriate security controls.
Long-term blocking recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
0/10
Inactive
Confidence Score
33%
Medium Confidence
Confidence History
16. Jul 2026 - 4. Oct 2026
33%
Current
Stable
Trend
Security Reports (2)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Web App Attack | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 93.158.120.221
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
ES
- ASN
- AS12552
- ISP
- GlobalConnect AB
DNS Information
- Reverse DNS
- mail.blonewssy.com
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 2
- First Reported
- 16 Jul 2026
- Last Reported
- 4 Oct 2026, 18:47
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS12552
GlobalConnect AB
SE
Network Threat Assessment
4/10
This network has low threat indicators with minimal suspicious activity.
Network Statistics
68
Total IPs Monitored
271
Total Reports
4
Reports per IP
Network Context
This IP address belongs to GlobalConnect AB (AS12552), which manages 68 IP addresses in our monitoring system. Out of these, 271 have been reported for suspicious activities, resulting in a network-wide threat level of 4/10.
Network notice:
This network shows some suspicious activity patterns. Monitor interactions with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 843,144 reported IPs worldwide
Threat Level
7/10
avg: 6.3
=
Total Reports
2
avg: 9
--
Network Comparison
Compared against 133 IPs in ASN 12552
Threat Level
7/10
network avg: 7.1
=
Total Reports
2
network avg: 3
-
Network GlobalConnect AB has overall threat level 4/10
Geographic Comparison
Compared against 3,550 IPs in ES
Threat Level
7/10
country avg: 6.2
=
Total Reports
2
country avg: 5
--
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
4 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Sunday
1 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
1
Web App Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
766,260 threat incidents tracked globally • Last 24h: 29,940 Logs
FEED
Top Threat Sources
-
01
United States149,856 19.6% -
02
Brazil112,405 14.7%
-
03
India89,001 11.6%
-
04
China46,383 6.1%
-
05
SC29,259 3.8%
-
06
Germany18,709 2.4%
-
07
Pakistan18,179 2.4%
-
08
Netherlands18,169 2.4%
-
09
Argentina16,464 2.1%
-
10
Colombia15,243 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.1/10
Avg Threat
38%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
83.140.108.177
10/10
Confidence
91%
Reports
13
Location
IT
IT
185.183.145.188
10/10
Confidence
43%
Reports
3
Location
SE
SE
93.158.102.5
8/10
Confidence
42%
Reports
3
Location
SE
SE
93.158.90.37
10/10
Confidence
41%
Reports
4
Location
SE
SE
159.253.220.163
8/10
Confidence
41%
Reports
3
Location
NO
NO
93.158.90.31
10/10
Confidence
40%
Reports
4
Location
SE
SE
185.6.9.128
10/10
Confidence
35%
Reports
15
Location
SE
SE
93.158.90.17
10/10
Confidence
35%
Reports
3
Location
SE
SE
93.158.90.40
10/10
Confidence
35%
Reports
3
Location
SE
SE
93.158.90.12
10/10
Confidence
35%
Reports
3
Location
SE
SE
93.158.90.30
10/10
Confidence
34%
Reports
3
Location
SE
SE
93.158.90.52
10/10
Confidence
34%
Reports
3
Location
SE
SE
93.158.90.35
10/10
Confidence
34%
Reports
3
Location
SE
SE
93.158.90.32
10/10
Confidence
31%
Reports
4
Location
SE
SE
93.158.91.239
10/10
Confidence
31%
Reports
3
Location
SE
SE
93.158.90.33
7/10
Confidence
31%
Reports
2
Location
SE
SE
93.158.90.43
7/10
Confidence
31%
Reports
2
Location
SE
SE
93.158.90.29
7/10
Confidence
31%
Reports
2
Location
SE
SE
93.158.90.36
7/10
Confidence
31%
Reports
2
Location
SE
SE
93.158.91.12
7/10
Confidence
30%
Reports
1
Location
SE
SE
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
86%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
158.158.37.2
8/10
Confidence
100%
Reports
15
ISP
Microsoft Corpo...
83.48.125.229
10/10
Confidence
96%
Reports
53
ISP
Telefonica De E...
194.164.169.12
10/10
Confidence
94%
Reports
302
ISP
IONOS SE
85.57.96.137
8/10
Confidence
93%
Reports
11
ISP
Orange Espagne SA
85.52.96.253
10/10
Confidence
90%
Reports
13
ISP
Orange Espagne SA
79.116.142.18
10/10
Confidence
90%
Reports
11
ISP
Digi Spain Tele...
80.102.218.187
10/10
Confidence
88%
Reports
93
ISP
Orange Espagne SA
91.245.204.148
8/10
Confidence
87%
Reports
22
ISP
Avatel Telecom, SA
46.24.47.94
10/10
Confidence
84%
Reports
144
ISP
Vodafone Spain
46.253.45.10
10/10
Confidence
83%
Reports
210
ISP
Gurbtec Iguana ...
185.214.101.139
10/10
Confidence
83%
Reports
25
ISP
Iomart Cloud Se...
46.6.127.33
10/10
Confidence
81%
Reports
13
ISP
Xtra Telecom S.A.
79.116.89.151
10/10
Confidence
76%
Reports
8
ISP
Digi Spain Tele...
89.128.44.92
8/10
Confidence
75%
Reports
18
ISP
Orange Espagne SA
178.60.63.113
8/10
Confidence
75%
Reports
12
ISP
R Cable y Telec...
IPs with similar threat level and confidence scores.
15
Related IPs
6.9/10
Avg Threat
33%
Avg Confidence
12
High Threat
High-risk network: Majority of related IPs are flagged
78.138.24.105
4/10
Confidence
33%
Reports
2
Location
US
US
2804:35fc:e1:f901:b8f0:9bd7:1b3b:1ff1
8/10
Confidence
33%
Reports
3
Location
BR
BR
103.255.156.199
8/10
Confidence
33%
Reports
3
Location
ID
ID
35.216.61.35
7/10
Confidence
33%
Reports
3
Location
KR
KR
36.106.167.18
7/10
Confidence
33%
Reports
2
Location
CN
CN
39.47.180.71
7/10
Confidence
33%
Reports
3
Location
PK
PK
34.82.113.157
7/10
Confidence
33%
Reports
4
Location
US
US
62.153.74.190
4/10
Confidence
33%
Reports
2
Location
DE
DE
34.158.38.105
7/10
Confidence
33%
Reports
4
Location
SG
SG
39.51.98.103
8/10
Confidence
33%
Reports
3
Location
PK
PK
35.198.220.250
7/10
Confidence
33%
Reports
4
Location
SG
SG
103.207.224.154
8/10
Confidence
33%
Reports
3
Location
IN
IN
45.33.73.73
6/10
Confidence
33%
Reports
2
Location
US
US
117.251.86.136
8/10
Confidence
33%
Reports
3
Location
IN
IN
36.77.241.249
8/10
Confidence
33%
Reports
3
Location
ID
ID