Critical Alert
IP 195.184.76.169 is a high-risk address assessed at 8/10 threat level, associated with sustained hacking activity detected across 156 abuse reports with 89% confidence. The IP, registered to ONYPHE SAS under ASN AS213412 in the United States, has demonstrated persistent intrusion activity since August 2025 through June 2026, with an activity frequency rating of 8/10.
Analysis of the 156 total reports reveals consistent malicious behavior primarily categorized as hacking attempts, with all 20 recent reports specifically citing unauthorized access and intrusion activity. Detection occurred exclusively through automated honeypot sensors, indicating systematic scanning and exploitation attempts against exposed network services. The sustained reporting period spanning nearly a year demonstrates persistent threat actor behavior rather than opportunistic or transient activity, suggesting the address may be part of automated attack infrastructure or a compromised system being leveraged for network intrusion.
Hacking activity of this nature typically involves reconnaissance scanning, vulnerability probing, and exploitation attempts against exposed services. Real-world risk includes unauthorized system access, data exfiltration, lateral movement within networks, and potential compromise of sensitive information or critical infrastructure. The high activity frequency combined with the confirmed threat level indicates this IP is actively engaged in hostile operations that pose genuine risk to exposed systems.
Organizations should implement immediate blocking or strict rate-limiting for this address at network boundaries. Deploying fail2ban or equivalent intrusion prevention tools can automatically detect and respond to the observed attack patterns. Ensuring all systems remain patched and implementing strong authentication mechanisms significantly reduces exploitability. Continuous monitoring and logging of connections from this IP will support incident response and threat analysis efforts.
FR 
CH 
BE