Elevated Risk
IP 91.230.168.251 is a high-risk address assessed at 8/10 threat level with 90% confidence, linked to hacking activity and supported by 164 total abuse reports across automated honeypot sensors between January and June 2026. This IP presents a clear and ongoing threat to exposed network services.
Automated honeypot sensors generated all 20 recent threat-category reports attributed to this address, indicating persistent intrusion-oriented probing. The IP operates within AS213412 (ONYPHE SAS) infrastructure in the United States, with an activity frequency rated at 8/10 — signalling highly regular engagement with target systems over its six-month reported window. The volume of reports and consistent activity pattern suggest sustained, automated scanning behaviour rather than opportunistic one-off contact.
Hacking activity encompasses a broad range of intrusion attempts, including exploitation of known vulnerabilities, brute-force authentication attacks, and unauthorized access probes against exposed services such as SSH, Telnet, or web interfaces. The real-world risk is concrete: an exposed service accepting connections from this IP without adequate hardening could be compromised, leading to data breach, lateral movement within a network, or recruitment into a botnet. Attackers automating this IP's behaviour are likely scanning continuously for weak credentials or unpatched software across thousands of targets simultaneously.
Site operators should block or rate-limit connections from 91.230.168.251 at the firewall level and monitor logs for any matching inbound attempts. Enforcing strong, unique credentials and disabling password-based authentication where possible significantly reduces brute-force risk. Keeping all software, firmware and operating systems current with security patches closes the vulnerabilities these automated scanners target. Deploying tools such as fail2ban or equivalent intrusion-prevention solutions to automatically block repeated failed-authentication attempts provides an additional proactive barrier against this class of threat.
FR 
PH 
BG