Significant Threat
IP 91.196.152.240 identified as significant threat (8/10) from 229 events.
Multiple malicious indicators detected. Confidence level: 77%.
More threatening than 93% of monitored IPs
IP Address
91.196.152.240
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
FR
Location
ONYPHE SAS
ASN 213412
229
Reports
Honeypot
Data Source
Threat Categories
Hacking
27
Indiscriminate Scan
3
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over 4 weeks indicates persistent threat actor operations.
First Observed
16. October 2026
Last Activity
14. November 2026
Recent (7 days)
9 incidents
Reputable Network
This IP is hosted on a network (ASN 213412) with generally good reputation. The ISP ONYPHE SAS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement rate limiting or temporary blocking measures.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
6/10
Moderate
Confidence Score
77%
Verified
Confidence History
24. Oct 2026 - 14. Nov 2026
77%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Indiscriminate Scan | Honeypot | 75% |
| Indiscriminate Scan | Honeypot | 75% | |
| Indiscriminate Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 91.196.152.240
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
FR
- ASN
- AS213412
- ISP
- ONYPHE SAS
DNS Information
- Reverse DNS
- jaxson.probe.onyphe.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 229
- First Reported
- 9 Feb 2026
- Last Reported
- 14 Nov 2026, 12:36
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213412
ONYPHE SAS
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1,017
Total IPs Monitored
75,064
Total Reports
73.8
Reports per IP
Network Context
This IP address belongs to ONYPHE SAS (AS213412), which manages 1,017 IP addresses in our monitoring system. Out of these, 75,064 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
93
%
Global Threat Ranking
This IP is more threatening than 93% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,352,021 reported IPs worldwide
Threat Level
8/10
avg: 6.0
+
Total Reports
229
avg: 7
++
Network Comparison
Compared against 1,056 IPs in ASN 213412
Threat Level
8/10
network avg: 8.7
=
Total Reports
229
network avg: 297
-
Network ONYPHE SAS has overall threat level 2/10
Geographic Comparison
Compared against 19,204 IPs in FR
Threat Level
8/10
country avg: 6.5
+
Total Reports
229
country avg: 18
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Oct 2026
7 reports
Daily Average
1.3
reports/day
Most Active
Monday
50 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
226
Indiscriminate Scan
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 13:00 with 19 reports
Weekly Activity
Geographic Threat Distribution
1,232,363 threat incidents tracked globally • Last 24h: 20,583 Logs
FEED
Top Threat Sources
-
01
Brazil261,723 21.2% -
02
United States213,624 17.3%
-
03
India104,161 8.5% -
04
China52,537 4.3% -
05
Argentina42,607 3.5% -
06
SC29,487 2.4% -
07
Mexico28,150 2.3% -
08
Russia27,412 2.2% -
09
Germany25,867 2.1% -
10
Colombia24,360 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
8.3/10
Avg Threat
91%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.231.89.33
8/10
Confidence
96%
Reports
186
Location
FR
FR
91.231.89.121
8/10
Confidence
92%
Reports
209
Location
FR
FR
91.231.89.103
8/10
Confidence
92%
Reports
206
Location
FR
FR
91.231.89.16
8/10
Confidence
92%
Reports
205
Location
FR
FR
91.231.89.36
10/10
Confidence
92%
Reports
190
Location
FR
FR
91.231.89.127
8/10
Confidence
91%
Reports
211
Location
FR
FR
91.231.89.23
8/10
Confidence
91%
Reports
202
Location
FR
FR
91.231.89.32
8/10
Confidence
91%
Reports
189
Location
FR
FR
91.231.89.99
8/10
Confidence
91%
Reports
180
Location
FR
FR
91.231.89.125
8/10
Confidence
90%
Reports
223
Location
FR
FR
91.231.89.37
8/10
Confidence
90%
Reports
220
Location
FR
FR
91.231.89.120
8/10
Confidence
90%
Reports
219
Location
FR
FR
91.231.89.39
8/10
Confidence
90%
Reports
208
Location
FR
FR
91.196.152.142
8/10
Confidence
90%
Reports
196
Location
FR
FR
91.231.89.22
10/10
Confidence
90%
Reports
195
Location
FR
FR
91.196.152.168
10/10
Confidence
90%
Reports
191
Location
FR
FR
91.231.89.35
8/10
Confidence
90%
Reports
181
Location
FR
FR
91.196.152.166
8/10
Confidence
89%
Reports
220
Location
FR
FR
91.231.89.100
8/10
Confidence
89%
Reports
215
Location
FR
FR
91.196.152.144
8/10
Confidence
89%
Reports
214
Location
FR
FR
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.8/10
Avg Threat
88%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.196.152.142
8/10
Confidence
90%
Reports
196
Location
FR
FR
91.196.152.168
10/10
Confidence
90%
Reports
191
Location
FR
FR
91.196.152.166
8/10
Confidence
89%
Reports
220
Location
FR
FR
91.196.152.144
8/10
Confidence
89%
Reports
214
Location
FR
FR
91.196.152.174
10/10
Confidence
89%
Reports
211
Location
FR
FR
91.196.152.169
8/10
Confidence
89%
Reports
211
Location
FR
FR
91.196.152.143
8/10
Confidence
89%
Reports
208
Location
FR
FR
91.196.152.66
8/10
Confidence
89%
Reports
201
Location
FR
FR
91.196.152.161
10/10
Confidence
88%
Reports
254
Location
FR
FR
91.196.152.49
10/10
Confidence
88%
Reports
243
Location
FR
FR
91.196.152.156
8/10
Confidence
88%
Reports
235
Location
FR
FR
91.196.152.229
10/10
Confidence
88%
Reports
228
Location
FR
FR
91.196.152.145
10/10
Confidence
88%
Reports
225
Location
FR
FR
91.196.152.171
8/10
Confidence
88%
Reports
223
Location
FR
FR
91.196.152.138
8/10
Confidence
88%
Reports
198
Location
FR
FR
91.196.152.141
8/10
Confidence
88%
Reports
195
Location
FR
FR
91.196.152.175
8/10
Confidence
88%
Reports
190
Location
FR
FR
91.196.152.48
10/10
Confidence
87%
Reports
264
Location
FR
FR
91.196.152.155
10/10
Confidence
87%
Reports
258
Location
FR
FR
91.196.152.165
8/10
Confidence
87%
Reports
247
Location
FR
FR
IPs from the same country with similar threat profiles.
15
Related IPs
8.5/10
Avg Threat
97%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
185.177.72.64
8/10
Confidence
100%
Reports
49
ISP
Bucklog SARL
104.28.196.57
8/10
Confidence
100%
Reports
18
ISP
Cloudflare, Inc.
104.28.228.55
8/10
Confidence
100%
Reports
17
ISP
Cloudflare, Inc.
104.28.228.57
8/10
Confidence
100%
Reports
14
ISP
Cloudflare, Inc.
141.95.162.162
10/10
Confidence
99%
Reports
37
ISP
OVH SAS
104.28.196.55
8/10
Confidence
97%
Reports
16
ISP
Cloudflare, Inc.
91.231.89.33
8/10
Confidence
96%
Reports
186
ISP
ONYPHE SAS
207.180.239.185
8/10
Confidence
96%
Reports
94
ISP
Contabo GmbH
54.37.75.84
8/10
Confidence
96%
Reports
62
ISP
OVH SAS
161.97.134.31
8/10
Confidence
96%
Reports
57
ISP
Contabo GmbH
161.97.133.50
8/10
Confidence
96%
Reports
55
ISP
Contabo GmbH
45.80.27.169
10/10
Confidence
96%
Reports
44
ISP
Free Pro SAS
163.172.66.206
10/10
Confidence
96%
Reports
42
ISP
Scaleway SAS
92.222.92.185
10/10
Confidence
96%
Reports
25
ISP
OVH SAS
2001:41d0:80a:3900::
7/10
Confidence
95%
Reports
10
ISP
OVH SAS
IPs with similar threat level and confidence scores.
15
Related IPs
10/10
Avg Threat
77%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
123.1.168.201
10/10
Confidence
77%
Reports
8
Location
HK
HK
172.98.32.159
10/10
Confidence
77%
Reports
7
Location
US
US
35.237.234.223
10/10
Confidence
77%
Reports
9
Location
US
US
103.134.131.42
10/10
Confidence
77%
Reports
11
Location
IN
IN
158.140.180.22
10/10
Confidence
77%
Reports
12
Location
ID
ID
103.26.94.164
10/10
Confidence
77%
Reports
45
Location
HK
HK
34.104.204.170
10/10
Confidence
77%
Reports
18
Location
JP
JP
34.13.142.72
10/10
Confidence
77%
Reports
19
Location
NL
NL
34.180.109.195
10/10
Confidence
77%
Reports
37
Location
JP
JP
151.95.23.125
10/10
Confidence
77%
Reports
13
Location
IT
IT
154.68.65.222
10/10
Confidence
77%
Reports
9
Location
RW
RW
154.219.124.231
10/10
Confidence
77%
Reports
12
Location
HK
HK
34.87.160.34
10/10
Confidence
77%
Reports
40
Location
SG
SG
172.67.72.24
10/10
Confidence
77%
Reports
16
176.123.4.110
10/10
Confidence
77%
Reports
13
Location
MD
MD