Notable Threat
IP address 91.230.168.5, hosted on network AS213412 operated by ONYPHE SAS in the United States, is a high-risk address assessed at threat level 8/10 with 93% confidence based on 163 total reports of hacking activity detected over a six-month window from January 2026 through June 2026.
The threat assessment is grounded in substantial evidence gathered from 20 automated honeypot sensors, which collectively logged repeated connection attempts and honeypot events consistent with intrusion activity. The activity frequency rating of 7/10 indicates persistent, automated probing rather than isolated incidents. All 20 most recent reports consistently classify the observed behaviour as general hacking attempts, encompassing unauthorized access attempts and exploitation probes targeting exposed services. The high confidence score reflects the consistency of reporting sources and the volume of independent detections across the sensor network over the first half of 2026.
Hacking activity as recorded for this IP represents systematic intrusion attempts rather than opportunistic noise. The sustained frequency and volume of connections suggest automated tooling designed to identify and exploit vulnerable services, whether through credential guessing, configuration probing or vulnerability scanning. For any exposed service directly reachable from the internet, such as SSH, RDP, web interfaces or administrative panels, this IP poses a credible risk of unauthorized access or compromise if security controls are not in place.
Site operators should block IP address 91.230.168.5 at the firewall or network perimeter to eliminate contact with exposed services. Deploying fail2ban or similar dynamic blocking tools can automatically ban repeated offenders based on honeypot event signatures. Enforcing strong authentication, disabling unused services, keeping systems patched and monitoring authentication logs for brute-force patterns will further reduce exposure to this threat vector.
FR 
JP 
NL 
GB