High Risk
IP 94.231.206.249 rated at threat level 8/10 based on 29 security reports.
Pattern analysis reveals concerning activity. Confidence: 66%.
More threatening than 92% of monitored IPs
IP Address
94.231.206.249
IPv4
Public
CN
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 10% High Threat
CN
Location
ONYPHE SAS
ASN 213412
29
Reports
Honeypot
Data Source
Threat Categories
Hacking
26
Exploited Host
3
Email Spam
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
19. October 2026
Last Activity
19. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 213412) with generally good reputation. The ISP ONYPHE SAS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Monitor closely and consider blocking. Escalation potential detected.
Long-term blocking recommended.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
0/10
Inactive
Confidence Score
66%
High Confidence
Confidence History
6. Feb 2026 - 19. Oct 2026
66%
Current
Stable
Trend
Security Reports (29)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking Exploited Host | Honeypot x2 | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Email Spam | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 94.231.206.249
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
CN
- ASN
- AS213412
- ISP
- ONYPHE SAS
DNS Information
- Reverse DNS
- fleur.probe.onyphe.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 29
- First Reported
- 6 Feb 2026
- Last Reported
- 19 Oct 2026, 22:29
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213412
ONYPHE SAS
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1,017
Total IPs Monitored
75,064
Total Reports
73.8
Reports per IP
Network Context
This IP address belongs to ONYPHE SAS (AS213412), which manages 1,017 IP addresses in our monitoring system. Out of these, 75,064 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
92
%
Global Threat Ranking
This IP is more threatening than 92% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 1,156,670 reported IPs worldwide
Threat Level
8/10
avg: 6.1
+
Total Reports
29
avg: 7
++
Network Comparison
Compared against 1,056 IPs in ASN 213412
Threat Level
8/10
network avg: 9.3
=
Total Reports
29
network avg: 268
--
Network ONYPHE SAS has overall threat level 2/10
Geographic Comparison
Compared against 48,064 IPs in CN
Threat Level
8/10
country avg: 7.4
=
Total Reports
29
country avg: 5
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
19 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Wednesday
9 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
5/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
26
Exploited Host
3
Email Spam
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 02:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
1,055,089 threat incidents tracked globally • Last 24h: 31,278 Logs
FEED
Top Threat Sources
-
01
Brazil219,306 20.8% -
02
United States189,903 18%
-
03
India95,487 9.1% -
04
China48,064 4.6%
-
05
Argentina35,421 3.4% -
06
SC29,346 2.8% -
07
Mexico23,128 2.2% -
08
Russia22,374 2.1% -
09
Colombia21,777 2.1% -
10
Germany20,732 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.2/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.231.89.33
8/10
Confidence
100%
Reports
141
Location
FR
FR
91.231.89.103
8/10
Confidence
98%
Reports
163
Location
FR
FR
91.231.89.23
10/10
Confidence
97%
Reports
157
Location
FR
FR
91.231.89.121
10/10
Confidence
97%
Reports
157
Location
FR
FR
91.231.89.16
8/10
Confidence
96%
Reports
153
Location
FR
FR
91.231.89.127
8/10
Confidence
96%
Reports
151
Location
FR
FR
91.196.152.144
8/10
Confidence
95%
Reports
179
Location
FR
FR
91.231.89.125
10/10
Confidence
95%
Reports
174
Location
FR
FR
91.231.89.98
10/10
Confidence
95%
Reports
167
Location
FR
FR
91.231.89.34
8/10
Confidence
95%
Reports
150
Location
FR
FR
91.231.89.99
10/10
Confidence
95%
Reports
133
Location
FR
FR
91.196.152.166
8/10
Confidence
94%
Reports
180
Location
FR
FR
91.196.152.140
10/10
Confidence
94%
Reports
170
Location
FR
FR
91.196.152.171
10/10
Confidence
94%
Reports
168
Location
FR
FR
91.231.89.37
10/10
Confidence
94%
Reports
168
Location
FR
FR
91.231.89.100
10/10
Confidence
94%
Reports
159
Location
FR
FR
91.231.89.126
10/10
Confidence
94%
Reports
158
Location
FR
FR
91.231.89.39
10/10
Confidence
94%
Reports
158
Location
FR
FR
91.196.152.138
8/10
Confidence
94%
Reports
153
Location
FR
FR
91.231.89.20
10/10
Confidence
94%
Reports
149
Location
FR
FR
IPs from the same subnet range, likely same network segment.
20
Related IPs
8.2/10
Avg Threat
76%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
94.231.206.36
8/10
Confidence
80%
Reports
44
Location
CN
CN
94.231.206.131
8/10
Confidence
80%
Reports
44
Location
CN
CN
94.231.206.253
8/10
Confidence
79%
Reports
47
Location
CN
CN
94.231.206.153
8/10
Confidence
79%
Reports
28
Location
CN
CN
94.231.206.6
8/10
Confidence
77%
Reports
51
Location
CN
CN
94.231.206.13
7/10
Confidence
77%
Reports
39
Location
CN
CN
94.231.206.106
8/10
Confidence
76%
Reports
52
Location
CN
CN
94.231.206.37
8/10
Confidence
76%
Reports
40
Location
CN
CN
94.231.206.205
10/10
Confidence
76%
Reports
39
Location
CN
CN
94.231.206.39
8/10
Confidence
75%
Reports
51
Location
CN
CN
94.231.206.203
8/10
Confidence
75%
Reports
40
Location
CN
CN
94.231.206.135
8/10
Confidence
75%
Reports
36
Location
CN
CN
94.231.206.3
8/10
Confidence
74%
Reports
61
Location
FR
FR
94.231.206.12
8/10
Confidence
74%
Reports
51
Location
CN
CN
94.231.206.105
10/10
Confidence
74%
Reports
40
Location
CN
CN
94.231.206.129
8/10
Confidence
73%
Reports
74
Location
FR
FR
94.231.206.10
8/10
Confidence
73%
Reports
57
Location
FR
FR
94.231.206.255
8/10
Confidence
73%
Reports
52
Location
CN
CN
94.231.206.14
8/10
Confidence
73%
Reports
50
Location
CN
CN
94.231.206.38
8/10
Confidence
73%
Reports
48
Location
CN
CN
IPs from the same country with similar threat profiles.
15
Related IPs
9.8/10
Avg Threat
99%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
27.155.120.131
10/10
Confidence
100%
Reports
21
ISP
Fuzhou
114.80.39.74
10/10
Confidence
100%
Reports
19
ISP
China Telecom (...
120.48.170.74
10/10
Confidence
100%
Reports
18
ISP
Beijing Baidu N...
120.48.148.35
10/10
Confidence
100%
Reports
15
ISP
Beijing Baidu N...
39.170.37.133
10/10
Confidence
100%
Reports
14
ISP
China Mobile co...
202.101.144.44
10/10
Confidence
99%
Reports
24
ISP
Chinanet
220.154.131.111
10/10
Confidence
99%
Reports
14
ISP
CHINANET Nanjin...
103.203.59.16
7/10
Confidence
98%
Reports
28
ISP
Beijing Tiantex...
36.134.69.15
10/10
Confidence
98%
Reports
20
ISP
China Mobile co...
183.252.199.17
10/10
Confidence
98%
Reports
16
ISP
China Mobile Co...
180.76.232.26
10/10
Confidence
98%
Reports
16
ISP
Beijing Baidu N...
120.48.176.104
10/10
Confidence
98%
Reports
15
ISP
Beijing Baidu N...
118.145.246.44
10/10
Confidence
97%
Reports
22
ISP
Beijing Volcano...
101.96.214.98
10/10
Confidence
97%
Reports
19
ISP
Beijing Volcano...
117.50.199.249
10/10
Confidence
97%
Reports
17
ISP
China Unicom Be...
IPs with similar threat level and confidence scores.
15
Related IPs
7.3/10
Avg Threat
66%
Avg Confidence
6
High Threat
Elevated risk: Multiple related IPs are flagged
209.207.158.253
6/10
Confidence
66%
Reports
9
Location
US
US
142.147.156.247
6/10
Confidence
66%
Reports
9
Location
US
US
209.207.154.34
6/10
Confidence
66%
Reports
9
Location
US
US
160.202.55.233
6/10
Confidence
66%
Reports
9
Location
US
US
165.154.173.148
10/10
Confidence
66%
Reports
7
Location
US
US
47.251.176.21
10/10
Confidence
66%
Reports
18
Location
US
US
176.65.132.39
10/10
Confidence
66%
Reports
85
Location
DE
DE
23.249.18.174
8/10
Confidence
66%
Reports
11
Location
HK
HK
222.167.110.252
6/10
Confidence
66%
Reports
9
Location
US
US
50.16.30.200
10/10
Confidence
66%
Reports
11
Location
US
US
212.46.145.254
6/10
Confidence
66%
Reports
10
Location
US
US
198.13.237.86
6/10
Confidence
66%
Reports
9
Location
US
US
45.131.195.216
8/10
Confidence
66%
Reports
13
Location
US
US
103.113.227.47
6/10
Confidence
66%
Reports
9
Location
US
US
212.46.159.129
6/10
Confidence
66%
Reports
9
Location
US
US