Notable Threat
IP 91.196.152.79 rated 8/10 from 30 verified reports.
Multiple security incidents attributed to this IP. Confidence: 94%.
More threatening than 84% of monitored IPs
IP Address
91.196.152.79
IPv4
Public
FR
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Above Average Risk
FR
Location
ONYPHE SAS
ASN 213412
30
Reports
Honeypot
Data Source
Threat Categories
Hacking
29
Port Scan
1
Technical Details
General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.
Recommended Mitigations
Keep systems patched, implement intrusion detection, and follow security best practices.
Reputable Network
This IP is hosted on a network (ASN 213412) with generally good reputation. The ISP ONYPHE SAS maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement appropriate security controls.
Continue monitoring for emerging patterns.
Reputation Summary
Threat Level
8/10
High
Critical
Activity Frequency
1/10
Very Low
Confidence Score
64%
High Confidence
Confidence History
24. Jan 2026 - 14. May 2026
94%
Current
Stable
Trend
Security Reports (30)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Port Scan | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Hacking | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 91.196.152.79
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
FR
- ASN
- AS213412
- ISP
- ONYPHE SAS
DNS Information
- Reverse DNS
- lexi.probe.onyphe.net
- PTR Record
- Yes
- Connection Type
- Static
Statistics
- Total Reports
- 30
- First Reported
- 24 Jan 2026
- Last Reported
- 14 May 2026, 14:47
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS213412
ONYPHE SAS
US
Network Threat Assessment
2/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
1,017
Total IPs Monitored
75,064
Total Reports
73.8
Reports per IP
Network Context
This IP address belongs to ONYPHE SAS (AS213412), which manages 1,017 IP addresses in our monitoring system. Out of these, 75,064 have been reported for suspicious activities, resulting in a network-wide threat level of 2/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
84
%
Global Threat Ranking
This IP is more threatening than 84% of all IPs in our database.
High Threat PercentileGlobal Comparison
Compared against 291,227 reported IPs worldwide
Threat Level
8/10
avg: 5.9
+
Total Reports
30
avg: 18
++
Network Comparison
Compared against 1,029 IPs in ASN 213412
Threat Level
8/10
network avg: 9.3
=
Total Reports
30
network avg: 156
--
Network ONYPHE SAS has overall threat level 2/10
Geographic Comparison
Compared against 5,811 IPs in FR
Threat Level
8/10
country avg: 6.4
+
Total Reports
30
country avg: 30
=
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
0 reports
Daily Average
0
reports/day
Most Active
Sunday
8 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Hacking
29
Port Scan
1
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 09:00 with 3 reports
Weekly Activity
Geographic Threat Distribution
273,235 threat incidents tracked globally • Last 24h: 17,827 Logs
FEED
Top Threat Sources
-
01
United States61,447 22.5%
-
02
India45,213 16.5% -
03
China34,029 12.5% -
04
Brazil14,627 5.4% -
05
Germany9,810 3.6% -
06
Singapore7,927 2.9% -
07
Indonesia7,825 2.9% -
08
Pakistan7,757 2.8% -
09
Russia6,140 2.2% -
10
Netherlands5,874 2.1%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.9/10
Avg Threat
95%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
195.184.76.81
10/10
Confidence
96%
Reports
75
Location
US
US
91.230.168.195
8/10
Confidence
96%
Reports
70
Location
US
US
91.196.152.81
10/10
Confidence
96%
Reports
40
Location
FR
FR
91.196.152.64
10/10
Confidence
96%
Reports
28
Location
FR
FR
91.196.152.225
10/10
Confidence
96%
Reports
25
Location
FR
FR
195.184.76.82
10/10
Confidence
95%
Reports
84
Location
US
US
195.184.76.86
10/10
Confidence
94%
Reports
81
Location
US
US
195.184.76.145
10/10
Confidence
94%
Reports
80
Location
US
US
91.230.168.244
10/10
Confidence
94%
Reports
78
Location
US
US
91.230.168.242
10/10
Confidence
94%
Reports
75
Location
US
US
91.230.168.224
10/10
Confidence
94%
Reports
71
Location
US
US
195.184.76.146
10/10
Confidence
94%
Reports
70
Location
US
US
91.230.168.198
10/10
Confidence
94%
Reports
69
Location
US
US
195.184.76.147
10/10
Confidence
94%
Reports
68
Location
US
US
195.184.76.79
10/10
Confidence
94%
Reports
66
Location
US
US
195.184.76.72
10/10
Confidence
94%
Reports
65
Location
US
US
91.230.168.227
10/10
Confidence
94%
Reports
63
Location
US
US
195.184.76.77
10/10
Confidence
94%
Reports
60
Location
US
US
91.230.168.194
10/10
Confidence
94%
Reports
59
Location
US
US
195.184.76.87
10/10
Confidence
94%
Reports
59
Location
US
US
IPs from the same subnet range, likely same network segment.
20
Related IPs
9.7/10
Avg Threat
94%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
91.196.152.81
10/10
Confidence
96%
Reports
40
Location
FR
FR
91.196.152.64
10/10
Confidence
96%
Reports
28
Location
FR
FR
91.196.152.225
10/10
Confidence
96%
Reports
25
Location
FR
FR
91.196.152.45
10/10
Confidence
94%
Reports
39
Location
FR
FR
91.196.152.57
10/10
Confidence
94%
Reports
36
Location
FR
FR
91.196.152.42
10/10
Confidence
94%
Reports
32
Location
FR
FR
91.196.152.61
10/10
Confidence
94%
Reports
32
Location
FR
FR
91.196.152.70
10/10
Confidence
94%
Reports
30
Location
FR
FR
91.196.152.84
10/10
Confidence
94%
Reports
28
Location
FR
FR
91.196.152.47
10/10
Confidence
94%
Reports
28
Location
FR
FR
91.196.152.78
10/10
Confidence
94%
Reports
27
Location
FR
FR
91.196.152.68
10/10
Confidence
94%
Reports
26
Location
FR
FR
91.196.152.231
10/10
Confidence
94%
Reports
26
Location
FR
FR
91.196.152.146
10/10
Confidence
94%
Reports
24
Location
FR
FR
91.196.152.224
10/10
Confidence
94%
Reports
23
Location
FR
FR
91.196.152.147
10/10
Confidence
94%
Reports
19
Location
FR
FR
91.196.152.249
8/10
Confidence
94%
Reports
14
Location
FR
FR
91.196.152.129
8/10
Confidence
94%
Reports
11
Location
FR
FR
91.196.152.202
10/10
Confidence
93%
Reports
107
Location
FR
FR
91.196.152.234
8/10
Confidence
93%
Reports
83
Location
FR
FR
IPs from the same country with similar threat profiles.
15
Related IPs
8.1/10
Avg Threat
100%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
143.244.57.84
8/10
Confidence
100%
Reports
677
ISP
Datacamp Limited
143.244.57.118
8/10
Confidence
100%
Reports
332
ISP
Datacamp Limited
146.70.194.238
8/10
Confidence
100%
Reports
327
ISP
M247 Europe SRL
85.204.70.106
8/10
Confidence
100%
Reports
294
ISP
Hydra Communica...
82.102.18.118
8/10
Confidence
100%
Reports
233
ISP
M247 Europe SRL
82.196.25.136
8/10
Confidence
100%
Reports
228
ISP
Free Pro SAS
91.227.37.60
8/10
Confidence
100%
Reports
200
ISP
Eurofiber Franc...
152.228.213.32
8/10
Confidence
100%
Reports
151
ISP
OVH SAS
143.244.57.82
8/10
Confidence
100%
Reports
139
ISP
Datacamp Limited
163.172.31.86
10/10
Confidence
100%
Reports
138
ISP
Scaleway SAS
161.97.129.228
8/10
Confidence
100%
Reports
138
ISP
Contabo GmbH
194.163.139.224
8/10
Confidence
100%
Reports
124
ISP
Contabo GmbH
92.205.188.156
8/10
Confidence
100%
Reports
98
ISP
Host Europe GmbH
178.18.246.56
8/10
Confidence
100%
Reports
92
ISP
Contabo GmbH
84.17.43.213
8/10
Confidence
100%
Reports
92
ISP
Datacamp Limited
IPs with similar threat level and confidence scores.
15
Related IPs
9.9/10
Avg Threat
94%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
51.68.207.118
10/10
Confidence
94%
Reports
9,723
Location
FR
FR
193.32.162.28
10/10
Confidence
94%
Reports
5,435
Location
RO
RO
49.12.27.102
10/10
Confidence
94%
Reports
3,548
Location
DE
DE
128.199.240.7
10/10
Confidence
94%
Reports
3,512
Location
SG
SG
45.198.224.18
10/10
Confidence
94%
Reports
3,496
Location
US
US
176.65.148.84
10/10
Confidence
94%
Reports
3,411
Location
NL
NL
162.55.119.195
10/10
Confidence
94%
Reports
3,404
Location
DE
DE
92.118.39.63
10/10
Confidence
94%
Reports
3,060
Location
US
US
5.187.35.142
8/10
Confidence
94%
Reports
3,018
Location
NL
NL
177.125.137.18
10/10
Confidence
94%
Reports
2,963
Location
MX
MX
45.205.1.110
10/10
Confidence
94%
Reports
2,318
Location
US
US
87.251.64.159
10/10
Confidence
94%
Reports
2,236
Location
US
US
4.145.113.4
10/10
Confidence
94%
Reports
1,642
Location
SG
SG
14.98.67.210
10/10
Confidence
94%
Reports
1,615
Location
IN
IN
160.119.71.136
10/10
Confidence
94%
Reports
1,604
Location
SC
SC
Analyzed high-risk IP addresses
- 51.68.207.118
- 94.154.35.215
- 185.246.128.133
- 176.65.149.67
- 193.32.162.28
- 80.94.92.183
- 66.132.172.175
- 66.132.172.162
- 66.132.172.165
- 66.132.172.160
- 66.132.172.164
- 66.132.172.167
- 66.132.172.172
- 66.132.172.161
- 66.132.172.173
- 66.132.172.174
- 66.132.172.171
- 66.132.172.168
- 66.132.172.166
- 66.132.172.170
- 66.132.172.169
- 66.132.172.163
- 85.215.239.226
- 46.151.178.13