Extreme Threat
IP address 91.196.152.118 is a critical-risk address with a maximum threat level of 10/10 that has accumulated 185 independent abuse reports documenting sustained hacking activity over an approximately ten-month observation window, making it one of the most reliably hostile sources currently active in western European network space.
The target IP belongs to AS213412 (operated by ONYPHE SAS, a France-based network operator) and carries a threat level of 10/10 with a confidence score of 86%, indicating strong analytical certainty that this address is engaged in malicious behavior. Automated honeypot sensors detected the address across 20 distinct detection points, with first reports dating to August 2025 and continued hostile activity logged through June 2026. The activity frequency rating of 7/10 confirms repeated, sustained engagement rather than opportunistic or single-episode scanning, and the volume of reports is substantial for a single attacking address observed over this timeframe.
The dominant reported threat category is general hacking activity, encompassing automated intrusion attempts, exploitation probing, and unauthorized access vectors against exposed services. This pattern represents concrete risk to any internet-facing system with misconfigured, unpatched, or weakly authenticated services, as sustained automated attacks can rapidly cycle through common credential sets and known vulnerability signatures until initial access is achieved. The consequences of successful compromise range from data exfiltration and lateral movement within networks to deployment of secondary attack infrastructure.
Site operators should implement immediate defensive measures including automated blocking tools such as fail2ban to dynamically ban addresses exceeding failed-authentication thresholds, enforce strict allowlist-based IP restrictions where feasible, and deploy continuous traffic analysis to identify and correlate attack patterns. Keeping all exposed services patched and following the principle of least privilege for accounts and services dramatically reduces the viable attack surface that this category of threat actor targets.
US 
JP 
AE 
GR 
BG 
RU 
EG 
HK 
UG 
CA 
MX 
DZ