91.196.152.111

🇫🇷Roubaix, Hauts-de-France, France · AS213412 ONYPHE SAS

Inside a reported network. 91.196.152.0/24 is listed by Firehol Level1 (Listed by raw.githubusercontent.com) Port Scan SSH Vulnerability Scan, last 19 minutes ago; each address inside gets 0.6% of a report.

A network report is spread across the network: each address receives the report's weight divided by half the number of addresses in it. Small networks weigh a lot, large ones very little.

74%

Abuse confidence: Medium

Reported 21 times by 6 reporters, most recently 9 hours ago.

What it was reported for

Reports

When	Reporter	Categories	Comment
9 hours ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
9 hours ago	Automated feed	Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
13 hours ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
18 hours ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
18 hours ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
31 hours ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
33 hours ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
42 hours ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
43 hours ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
43 hours ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
2 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
2 days ago	Automated feed	Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
2 days ago	Automated feed	Web App Attack Command & Control	Listed by raw.githubusercontent.com
2 days ago	Automated feed	Port Scan Hacking Vulnerability Scan	Listed by raw.githubusercontent.com
2 days ago	Automated feed	Web Spam Port Scan Bad Web Bot	Listed by raw.githubusercontent.com
2 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
3 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
3 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
4 days ago	Automated feed	DNS Poisoning SQL Injection Bad Web Bot Exploited Host SSH Vulnerability Scan Malware Distribution Command & Control API Abuse Fake Accounts Telnet Abuse	Listed by ThreatView.io
4 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com
6 days ago	Automated feed	FTP Brute-Force Phishing Open Proxy Web Spam Brute-Force Web App Attack Command & Control HTTP Flood	Listed by cinsscore.com

Details

Version: IPv4
Tor exit: no
Hostname: yoder.probe.onyphe.net
ASN: AS213412
Network: ONYPHE SAS
Country: 🇫🇷 France (EU)
Region: Hauts-de-France
City: Roubaix (approx.)
First seen: 25 Oct 2026
Last seen: 31 Oct 2026

Location and network: IP Geolocation by DB-IP

Reported nearby

Other addresses in the same /24 reported in the last 90 days.

Same lookup from a script

curl -s "https://isipsafe.com/api/v1/check?ip=91.196.152.111"

Check the surrounding /24 · API docs