Is 91.196.152.189 malicious?

IP reputation report for 91.196.152.189: blocklist detections, geolocation, ASN, WHOIS and security posture, aggregated from 100+ threat intelligence sources.

91.196.152.189 is listed on 42 threat intelligence sources

Detected by 42 threat intelligence sources in the isMalicious dataset — review before trusting this IP.

Threat verdict

VerdictListed on blocklists

Appears on threat intelligence blocklists — treat with caution.

Blocklist detections42 sources

Categoriesmalware, phishing, suspicious, abuse, botnet, malicious, attack, dns, bruteforce, c2

Confidence score100/100

Aggregated confidence across the sources reporting this indicator.

Last updated2026-07-05

Network & location

LocationRoubaix, Hauts-de-France, France

ISPOnyphe SAS

ASNAS213412 — ONYPHE SAS

Network91.196.152.0/24

CompanyONYPHE SAS

InfrastructureProxy

Security posture

Open ports80, 443

Detections

Duggytuxy - Blacklist Ips For Fortinet Firewall Aa.txt
FireHOL - Bds Atifmalware
FireHOL - Ciarmymalware
FireHOL - Iblocklist Ciarmy Maliciousmalware
Opendbl Net - Ipsum.listmalware
Romain Marcoux - Malicious Outgoing IPsphishing
Romain Marcoux - Malicious IPsphishing
CyberCure Hash Feedmalware
CyberCure Blocked URL Feedmalware
CyberCure IP Feedmalware
IPsum Level 2suspicious
IPsum Level 3suspicious
IPsum Level 6suspicious
IPsum – malicious IP feedmalware
Binary Defense - Banlist
ThreatHive - Hive Blocklist
Borestad - AbuseIPDB Blocklist (1d)abuse
Malware-Filter - Botnet Filterbotnet
Data-Shield IPv4 Blocklistmalware
IPsum Level 1suspicious
IPsum Level 5suspicious
Malware-Filter - Botnet Filter IPsbotnet
T145 - Black Mirror IPv4 Blocklistmalware
CINSSCORE Bad Guysmalware

+18 more sources in the full report.

Threat categories

malware phishing suspicious abuse botnet attack c2

Related malicious IPs on nearby networks

91.196.152.155 91.196.152.117 91.196.152.13 91.196.152.129 91.196.152.148 91.196.152.16 91.196.152.14 91.196.152.143

Run a live scan of 91.196.152.189 Download IP blocklists →