Extreme Threat
IP 191.52.249.154 classified at threat level 10/10 with 34 documented attacks.
Advanced threat indicators confirmed with 59% certainty.
More threatening than 98% of monitored IPs
IP Address
191.52.249.154
IPv4
Public
BR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Brazil
Location
MARVITEL TELECOM
ASN 263165
34
Reports
Mixed
Data Source
Threat Categories
WP Login Brute Force
15
Brute-Force
14
DDoS Attack
1
Hacking
1
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
22. September 2026
Last Activity
22. September 2026
Recent (7 days)
0 incidents
High-Risk Network Association
This IP belongs to a network (ASN 263165) with elevated threat levels. The ISP MARVITEL TELECOM hosts multiple reported malicious addresses, suggesting systemic security issues or permissive policies.
Network-wide patterns may indicate this is part of a larger malicious infrastructure.
Security Recommendations
Proactive blocking essential. Significant operational risk detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
59%
High Confidence
Confidence History
12. Jun 2026 - 22. Sep 2026
59%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Hacking DDoS Attack | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| Brute-Force | Community | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% | |
| WP Login Brute Force | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 191.52.249.154
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class B
Geolocation
- Country
-
BR
- ASN
- AS263165
- ISP
- MARVITEL TELECOM
DNS Information
- Reverse DNS
- 191-52-249-154.marvitel.com.br
- PTR Record
- Yes
- Connection Type
- Dynamic
Statistics
- Total Reports
- 34
- First Reported
- 28 May 2026
- Last Reported
- 22 Sep 2026, 22:19
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS263165
MARVITEL TELECOM
BR
Network Threat Assessment
8/10
This network has a high threat level with significant malicious activity reported across multiple IPs.
Network Statistics
1
Total IPs Monitored
10
Total Reports
10
Reports per IP
Network Context
This IP address belongs to MARVITEL TELECOM (AS263165), which manages 1 IP addresses in our monitoring system. Out of these, 10 have been reported for suspicious activities, resulting in a network-wide threat level of 8/10.
Network warning:
This network has elevated threat levels. Exercise caution when interacting with IPs from this ASN.
Comparative Analysis
How this IP compares to others in our threat intelligence database
98
%
Global Threat Ranking
This IP is more threatening than 98% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 832,561 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
34
avg: 9
++
Network Comparison
Compared against 5 IPs in ASN 263165
Threat Level
10/10
network avg: 7.2
+
Total Reports
34
network avg: 11
++
Network MARVITEL TELECOM has overall threat level 8/10
Geographic Comparison
Compared against 111,841 IPs in BR
Threat Level
10/10
country avg: 5.4
++
Total Reports
34
country avg: 3
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
22 Sep 2026
2 reports
Daily Average
0.1
reports/day
Most Active
Tuesday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Brute-Force
18
WP Login Brute Force
15
Hacking
1
DDoS Attack
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 6 reports
Weekly Activity
Geographic Threat Distribution
756,884 threat incidents tracked globally • Last 24h: 29,742 Logs
FEED
Top Threat Sources
-
01
United States148,134 19.6% -
02
Brazil111,841 14.8%
-
03
India87,172 11.5%
-
04
China46,061 6.1%
-
05
SC29,252 3.9%
-
06
Germany18,369 2.4%
-
07
Netherlands17,978 2.4%
-
08
Pakistan17,806 2.4%
-
09
Argentina16,266 2.1%
-
10
Colombia15,169 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
4
Related IPs
6.5/10
Avg Threat
29%
Avg Confidence
2
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same subnet range, likely same network segment.
2
Related IPs
6.5/10
Avg Threat
51%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.9/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
35.247.221.203
10/10
Confidence
100%
Reports
114
ISP
Google LLC
177.126.90.235
10/10
Confidence
100%
Reports
94
ISP
NOVA TELECOM LTDA
189.125.111.177
10/10
Confidence
100%
Reports
67
ISP
Level 3 Parent,...
191.37.68.23
10/10
Confidence
100%
Reports
39
ISP
GTR NET COMUNIC...
35.198.9.49
8/10
Confidence
100%
Reports
25
ISP
Google LLC
108.174.147.36
10/10
Confidence
100%
Reports
19
ISP
Oracle Corporation
167.250.160.139
10/10
Confidence
100%
Reports
19
ISP
PLUS PROVEDOR D...
179.42.38.152
8/10
Confidence
100%
Reports
17
ISP
ONDANET PE
177.3.125.136
8/10
Confidence
100%
Reports
16
ISP
V tal
201.63.223.141
10/10
Confidence
100%
Reports
16
ISP
TELEFONICA BRAS...
45.71.163.20
8/10
Confidence
100%
Reports
15
ISP
Wind Telecomuni...
191.34.15.66
8/10
Confidence
100%
Reports
15
ISP
TELEFONICA BRAS...
177.141.38.198
8/10
Confidence
100%
Reports
15
ISP
Claro NXT Telec...
200.195.10.85
8/10
Confidence
100%
Reports
15
ISP
V tal
104.28.234.61
8/10
Confidence
100%
Reports
15
ISP
Cloudflare, Inc.
IPs with similar threat level and confidence scores.
15
Related IPs
9.1/10
Avg Threat
59%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
62.169.28.68
8/10
Confidence
59%
Reports
5
Location
FR
FR
194.5.82.144
8/10
Confidence
59%
Reports
8
Location
SG
SG
194.5.82.119
8/10
Confidence
59%
Reports
8
Location
SG
SG
102.213.92.30
7/10
Confidence
59%
Reports
6
Location
KE
KE
202.165.25.206
8/10
Confidence
59%
Reports
14
Location
MY
MY
131.108.149.209
10/10
Confidence
59%
Reports
4
Location
BR
BR
212.200.181.151
10/10
Confidence
59%
Reports
4
Location
RS
RS
136.158.25.117
10/10
Confidence
59%
Reports
7
Location
PH
PH
193.37.32.58
8/10
Confidence
59%
Reports
6
Location
SG
SG
81.19.216.92
10/10
Confidence
59%
Reports
5
Location
NL
NL
2404:7c00:41:40d5:1080:a253:4d2a:e6dd
10/10
Confidence
59%
Reports
4
Location
NP
NP
205.185.222.50
10/10
Confidence
59%
Reports
6
Location
DE
DE
120.56.115.47
10/10
Confidence
59%
Reports
4
Location
IN
IN
112.196.166.49
10/10
Confidence
59%
Reports
4
Location
IN
IN
201.123.226.67
10/10
Confidence
59%
Reports
6
Location
MX
MX