Significant Threat
IP 91.196.152.166 identified as significant threat (8/10) from 48 events.
Multiple malicious indicators detected. Confidence level: 98%.
More threatening than 86% of monitored IPs
IP Address
91.196.152.166
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
FR
Location
ONYPHE SAS
ASN 213412
48
Reports
Honeypot
Data Source
Threat Categories
Hacking
30
Port Scan
1
Brute-Force
1
WP Login Brute Force
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 1 week indicates persistent threat actor operations.
First Observed
13. August 2026
Last Activity
21. August 2026
Recent (7 days)
11 incidents
Reputable Network
This IP is hosted on a network (ASN 213412) with generally good reputation. The ISP ONYPHE SAS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
7/10
High
Confidence Score
98%
Verified
Confidence History
9. Apr 2026 - 21. Aug 2026
98%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan Hacking Brute-Force +1 | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 91.196.152.166
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
FR
- ASN
- AS213412
- ISP
- ONYPHE SAS
DNS Information
- Reverse DNS
- pollard.probe.onyphe.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 48
- First Reported
- 20 Aug 2025
- Last Reported
- 21 Aug 2026, 18:55
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213412
ONYPHE SAS
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1,017
Total IPs Monitored
75,064
Total Reports
73.8
Reports per IP
Network Context
This IP address belongs to ONYPHE SAS (AS213412), which manages 1,017 IP addresses in our monitoring system. Out of these, 75,064 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
86
%
Global Threat Ranking
This IP is more threatening than 86% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 389,023 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
48
avg: 15
++
Network Comparison
Compared against 1,056 IPs in ASN 213412
Threat Level
8/10
network avg: 9.4
=
Total Reports
48
network avg: 190
--
Network ONYPHE SAS has overall threat level 2/10
Geographic Comparison
Compared against 7,248 IPs in FR
Threat Level
8/10
country avg: 6.5
+
Total Reports
48
country avg: 29
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
13 Aug 2026
5 reports
Daily Average
0.8
reports/day
Most Active
Thursday
12 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
46
IoT Targeted
1
Exploited Host
1
Port Scan
1
Brute-Force
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 23:00 with 5 reports
Weekly Activity
Geographic Threat Distribution
361,392 threat incidents tracked globally • Last 24h: 18,758 Logs
FEED
Top Threat Sources
-
01
United States86,620 24% -
02
India56,006 15.5%
-
03
China38,626 10.7%
-
04
Brazil29,220 8.1%
-
05
Germany11,687 3.2%
-
06
Pakistan9,788 2.7%
-
07
Indonesia9,283 2.6%
-
08
Singapore9,045 2.5%
-
09
Russia7,253 2%
-
10
France7,248 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.3/10
Avg Threat
97%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.231.89.33
8/10
Confidence
100%
Reports
23
Location
FR
FR
91.196.152.49
10/10
Confidence
98%
Reports
77
Location
FR
FR
91.196.152.229
10/10
Confidence
98%
Reports
75
Location
FR
FR
91.196.152.144
8/10
Confidence
98%
Reports
43
Location
FR
FR
91.231.89.121
8/10
Confidence
98%
Reports
32
Location
FR
FR
91.231.89.23
10/10
Confidence
98%
Reports
24
Location
FR
FR
91.231.89.16
10/10
Confidence
98%
Reports
23
Location
FR
FR
91.231.89.103
8/10
Confidence
98%
Reports
23
Location
FR
FR
91.230.168.198
10/10
Confidence
96%
Reports
133
Location
US
US
91.230.168.107
10/10
Confidence
96%
Reports
133
Location
US
US
91.230.168.241
10/10
Confidence
96%
Reports
131
Location
US
US
91.230.168.195
8/10
Confidence
96%
Reports
128
Location
US
US
195.184.76.74
8/10
Confidence
96%
Reports
126
Location
US
US
195.184.76.147
10/10
Confidence
96%
Reports
104
Location
US
US
91.196.152.81
10/10
Confidence
96%
Reports
99
Location
FR
FR
91.196.152.50
10/10
Confidence
96%
Reports
98
Location
FR
FR
91.196.152.77
10/10
Confidence
96%
Reports
80
Location
FR
FR
91.196.152.227
8/10
Confidence
96%
Reports
79
Location
FR
FR
91.196.152.48
10/10
Confidence
96%
Reports
76
Location
FR
FR
91.196.152.225
10/10
Confidence
96%
Reports
76
Location
FR
FR
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.5/10
Avg Threat
96%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.196.152.49
10/10
Confidence
98%
Reports
77
Location
FR
FR
91.196.152.229
10/10
Confidence
98%
Reports
75
Location
FR
FR
91.196.152.144
8/10
Confidence
98%
Reports
43
Location
FR
FR
91.196.152.81
10/10
Confidence
96%
Reports
99
Location
FR
FR
91.196.152.50
10/10
Confidence
96%
Reports
98
Location
FR
FR
91.196.152.77
10/10
Confidence
96%
Reports
80
Location
FR
FR
91.196.152.227
8/10
Confidence
96%
Reports
79
Location
FR
FR
91.196.152.48
10/10
Confidence
96%
Reports
76
Location
FR
FR
91.196.152.225
10/10
Confidence
96%
Reports
76
Location
FR
FR
91.196.152.82
8/10
Confidence
96%
Reports
74
Location
FR
FR
91.196.152.155
10/10
Confidence
96%
Reports
71
Location
FR
FR
91.196.152.159
10/10
Confidence
96%
Reports
69
Location
FR
FR
91.196.152.156
10/10
Confidence
96%
Reports
62
Location
FR
FR
91.196.152.64
10/10
Confidence
96%
Reports
53
Location
FR
FR
91.196.152.161
10/10
Confidence
96%
Reports
46
Location
FR
FR
91.196.152.51
10/10
Confidence
95%
Reports
102
Location
FR
FR
91.196.152.228
10/10
Confidence
94%
Reports
102
Location
FR
FR
91.196.152.87
8/10
Confidence
94%
Reports
100
Location
FR
FR
91.196.152.55
8/10
Confidence
94%
Reports
97
Location
FR
FR
91.196.152.74
10/10
Confidence
94%
Reports
90
Location
FR
FR
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
82.196.25.136
8/10
Confidence
100%
Reports
228
ISP
Free Pro SAS
91.227.37.60
8/10
Confidence
100%
Reports
200
ISP
Eurofiber Franc...
163.172.31.86
10/10
Confidence
100%
Reports
138
ISP
Scaleway SAS
161.97.129.228
8/10
Confidence
100%
Reports
138
ISP
Contabo GmbH
194.163.139.224
8/10
Confidence
100%
Reports
124
ISP
Contabo GmbH
92.205.188.156
8/10
Confidence
100%
Reports
98
ISP
Host Europe GmbH
178.18.246.56
8/10
Confidence
100%
Reports
92
ISP
Contabo GmbH
84.17.43.213
8/10
Confidence
100%
Reports
92
ISP
Datacamp Limited
135.125.45.146
10/10
Confidence
100%
Reports
70
ISP
OVH SAS
51.77.152.49
8/10
Confidence
100%
Reports
67
ISP
OVH SAS
163.172.78.108
10/10
Confidence
100%
Reports
56
ISP
Scaleway SAS
51.15.160.8
8/10
Confidence
100%
Reports
51
ISP
Scaleway SAS
51.91.98.45
10/10
Confidence
100%
Reports
48
ISP
OVH SAS
51.38.192.10
8/10
Confidence
100%
Reports
42
ISP
OVH SAS
13.140.175.37
8/10
Confidence
100%
Reports
40
ISP
Contabo GmbH
IPs with similar threat level and confidence scores.
15
Related IPs
9.5/10
Avg Threat
98%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
87.251.64.146
10/10
Confidence
98%
Reports
4,012
Location
US
US
85.11.167.7
10/10
Confidence
98%
Reports
1,894
Location
BG
BG
195.178.110.137
10/10
Confidence
98%
Reports
1,305
Location
BG
BG
213.209.159.236
10/10
Confidence
98%
Reports
1,041
Location
TW
TW
193.32.162.35
10/10
Confidence
98%
Reports
992
Location
RO
RO
213.209.159.11
10/10
Confidence
98%
Reports
970
Location
DE
DE
213.209.159.238
10/10
Confidence
98%
Reports
963
Location
TW
TW
213.209.159.226
8/10
Confidence
98%
Reports
960
Location
TW
TW
213.209.159.241
8/10
Confidence
98%
Reports
928
Location
TW
TW
192.253.248.229
10/10
Confidence
98%
Reports
853
Location
IR
IR
208.109.188.137
8/10
Confidence
98%
Reports
560
Location
US
US
213.209.159.108
10/10
Confidence
98%
Reports
473
Location
TW
TW
103.189.234.69
8/10
Confidence
98%
Reports
445
Location
ID
ID
20.89.17.172
10/10
Confidence
98%
Reports
400
Location
JP
JP
211.223.107.86
10/10
Confidence
98%
Reports
324
Location
KR
KR
Analyzed high-risk IP addresses
- 51.68.207.118
- 185.246.128.133
- 66.132.172.175
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.162
- 66.132.172.172
- 66.132.172.167
- 66.132.172.174
- 66.132.172.161
- 66.132.172.168
- 66.132.172.171
- 66.132.172.173
- 66.132.172.170
- 66.132.172.166
- 66.132.172.169
- 66.132.172.163
- 193.32.162.28
- 80.94.92.183
- 176.65.148.84
- 207.90.244.11
- 85.215.239.226
- 46.151.178.13