Elevated Risk
Elevated threat level 7/10 for IP 91.227.156.112 from 7 reported incidents.
Behavioral profile indicates cyber threat activity with 60% confidence.
More threatening than 88% of monitored IPs
IP Address
91.227.156.112
IPv4
Public
PL
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
Poland
Location
ConnectIT Marcin Hajka
ASN 56783
7
Reports
Honeypot
Data Source
Threat Categories
Fraud VoIP
7
Technical Details
VoIP fraud exploits phone systems to make unauthorized calls, often to premium rate numbers for financial gain.
Recommended Mitigations
Implement call authentication, monitor call patterns, and restrict international/premium rate dialing.
Behavioral Analysis
Activity Pattern:
Recent Spike
Significant activity increase over past 7 days indicates renewed threat actor interest or system compromise.
First Observed
24. October 2026
Last Activity
27. October 2026
Recent (7 days)
7 incidents
Reputable Network
This IP is hosted on a network (ASN 56783) with generally good reputation. The ISP ConnectIT Marcin Hajka maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Enhanced monitoring recommended. Review logs for interactions with this IP.
Immediate monitoring recommended.
Reputation Summary
Threat Level
7/10
High
High
Activity Frequency
8/10
High
Confidence Score
60%
High Confidence
Confidence History
24. Oct 2026 - 27. Oct 2026
60%
Current
Stable
Trend
Security Reports (7)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| New | Fraud VoIP | Honeypot | 75% |
| New | Fraud VoIP | Honeypot | 75% |
| New | Fraud VoIP | Honeypot | 75% |
| New | Fraud VoIP | Honeypot | 75% |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% | |
| Fraud VoIP | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 91.227.156.112
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
PL
- ASN
- AS56783
- ISP
- ConnectIT Marcin Hajka
DNS Information
- Reverse DNS
- a112.connectit.pl
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 7
- First Reported
- 26 Oct 2026
- Last Reported
- 27 Oct 2026, 20:32
Comparative Analysis
How this IP compares to others in our threat intelligence database
88
%
Global Threat Ranking
This IP is more threatening than 88% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 1,286,200 reported IPs worldwide
Threat Level
7/10
avg: 6.0
+
Total Reports
7
avg: 7
=
Network Comparison
Compared against 4 IPs in ASN 56783
Threat Level
7/10
network avg: 6.3
=
Total Reports
7
network avg: 3
++
Geographic Comparison
Compared against 15,304 IPs in PL
Threat Level
7/10
country avg: 5.8
+
Total Reports
7
country avg: 4
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
26 Oct 2026
3 reports
Daily Average
0.2
reports/day
Most Active
Monday
3 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
5/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Fraud VoIP
7
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 00:00 with 1 reports
Weekly Activity
Geographic Threat Distribution
1,172,506 threat incidents tracked globally • Last 24h: 30,299 Logs
FEED
Top Threat Sources
-
01
Brazil258,339 22% -
02
United States198,587 16.9% -
03
India102,310 8.7% -
04
China49,447 4.2% -
05
Argentina41,876 3.6% -
06
SC29,406 2.5% -
07
Mexico27,345 2.3% -
08
Russia26,396 2.3% -
09
Colombia23,993 2% -
10
Germany22,623 1.9%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
3
Related IPs
6/10
Avg Threat
30%
Avg Confidence
1
High Threat
Elevated risk: Multiple related IPs are flagged
IPs from the same subnet range, likely same network segment.
2
Related IPs
6.5/10
Avg Threat
40%
Avg Confidence
1
High Threat
High-risk network: Majority of related IPs are flagged
IPs from the same country with similar threat profiles.
15
Related IPs
8.7/10
Avg Threat
93%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
57.128.222.79
10/10
Confidence
100%
Reports
64
ISP
OVH SAS
45.141.215.52
8/10
Confidence
95%
Reports
133
ISP
1337 Services GmbH
57.128.239.181
10/10
Confidence
95%
Reports
24
ISP
OVH SAS
87.251.64.125
10/10
Confidence
94%
Reports
148
ISP
ISAEV Igor
70.34.252.163
10/10
Confidence
94%
Reports
54
ISP
The Constant Co...
193.34.212.123
10/10
Confidence
93%
Reports
3,590
ISP
MEVSPACE sp. z ...
77.83.101.41
10/10
Confidence
93%
Reports
1,427
ISP
Atman Sp. z o.o.
202.78.163.94
7/10
Confidence
91%
Reports
19
ISP
G-Core Labs S.A.
91.227.216.62
7/10
Confidence
91%
Reports
16
ISP
FIBERLINK Sp. z...
194.29.182.62
7/10
Confidence
91%
Reports
15
ISP
Multiplay Sp. z...
109.241.91.250
7/10
Confidence
91%
Reports
14
ISP
Vectra S.A.
85.221.152.77
10/10
Confidence
91%
Reports
12
ISP
INEA sp. z o.o.
109.243.0.231
8/10
Confidence
91%
Reports
11
ISP
Play
145.239.89.124
10/10
Confidence
89%
Reports
17
ISP
OVH SAS
79.139.117.131
7/10
Confidence
89%
Reports
13
ISP
Inter Plus Sp. ...
IPs with similar threat level and confidence scores.
15
Related IPs
7.1/10
Avg Threat
60%
Avg Confidence
9
High Threat
High-risk network: Majority of related IPs are flagged
5.63.189.6
7/10
Confidence
60%
Reports
7
Location
PL
PL
203.128.6.159
8/10
Confidence
60%
Reports
20
Location
PK
PK
209.207.235.158
6/10
Confidence
60%
Reports
9
Location
US
US
209.139.50.70
6/10
Confidence
60%
Reports
9
Location
US
US
158.94.197.63
6/10
Confidence
60%
Reports
9
Location
US
US
104.28.225.82
10/10
Confidence
60%
Reports
8
Location
BR
BR
47.251.174.222
10/10
Confidence
60%
Reports
12
Location
US
US
62.101.188.151
6/10
Confidence
60%
Reports
9
Location
US
US
136.242.120.20
6/10
Confidence
60%
Reports
9
Location
US
US
162.218.211.167
6/10
Confidence
60%
Reports
9
Location
US
US
103.109.99.4
7/10
Confidence
60%
Reports
7
Location
BD
BD
103.147.191.1
7/10
Confidence
60%
Reports
7
Location
BD
BD
47.243.53.61
7/10
Confidence
60%
Reports
7
Location
HK
HK
47.57.142.165
7/10
Confidence
60%
Reports
7
Location
HK
HK
185.128.20.225
7/10
Confidence
60%
Reports
7
Location
PL
PL