Critical Alert
IP address 91.231.89.139 is a critical-risk address located in France that has generated 159 abuse reports, with hacking activity representing the dominant threat category and a sustained activity frequency rated 8 out of 10.
The address operates within AS213412 under the network operator ONYPHE SAS, and automated honeypot sensors have reported malicious activity between August 2025 and June 2026. With a confidence score of 87% across 159 total reports, the volume and consistency of detections indicate persistent scanning and intrusion attempts originating from this French infrastructure. The high activity frequency score of 8/10 suggests continuous automated targeting rather than isolated opportunistic probes.
Hacking activity encompasses a broad spectrum of intrusion attempts, including exploitation of vulnerabilities, credential attacks, and unauthorized access attempts against exposed services. The sustained nature of reports from multiple honeypot sensors indicates this IP is actively scanning and attempting to compromise accessible systems. Any service exposed to the internet, particularly those with weak authentication mechanisms, outdated software, or misconfigured access controls, faces a concrete threat from this address.
Site operators should implement defensive measures such as enforcing strong authentication policies, applying rate limiting to login and API endpoints, and maintaining current software patching cycles. Utilizing tools like fail2ban or comparable intrusion prevention systems can automatically block repeated offending connections. Regular review of access logs and network traffic patterns will help identify and mitigate attempts from this and similar high-risk addresses.