IP Address

77.91.118.18

IPv4 Public
RU RU
AS61436
INTEX ltd.
1,166 Reports
This IP is on the Blacklist High confidence threat - blocking recommended
8/10 Threat
94% Confidence
1,166 Reports

Threat Intelligence Analysis

AI-generated security assessment based on aggregated threat data

Above Average Risk
RU
Russia Location
INTEX ltd. ASN 61436
1,166 Reports
Honeypot Data Source

Notable Threat

IP 77.91.118.18 is a high-risk address originating from Russia, linked to sustained automated hacking activity including intrusion attempts and vulnerability exploitation, with 1,105 abuse reports filed against it over a concentrated three-month period in mid-2026.

Telemetry from automated honeypot sensors shows IP 77.91.118.18, allocated to INTEX ltd. in Russia (AS61436), generated all 1,105 reports through automated detection systems. The narrow timeframe between first reports in May 2026 and last reports in July 2026, combined with an activity frequency rating of 8/10, indicates a focused, intensive campaign rather than sporadic opportunistic scanning. The 94% confidence score reflects highly reliable detection with minimal ambiguity in the attack pattern classification.

The dominant threat category—hacking—encompasses a broad spectrum of intrusion activity including unauthorized access attempts, exploitation of vulnerable services, and automated exploitation toolkits. With over one thousand documented interactions and an 8/10 threat level, this IP has demonstrated repeated capability and intent to compromise exposed systems. Any publicly accessible service associated with this address faces material risk of credential compromise, data exfiltration, or further network penetration should initial access be achieved.

Defensive measures should include implementing automated abuse-management tools such as fail2ban to dynamically block repeated login failures, enforcing strong multi-factor authentication on all accessible services, maintaining rigorous patch management cycles, and monitoring adjacent IP ranges within AS61436 for related scanning activity. Organizations with direct exposure should review authentication logs for any connections originating from this address and consider a proactive block at the network perimeter.

More threatening than 84% of monitored IPs

Threat Categories

Hacking 30

Technical Details

General hacking activity includes various intrusion attempts, exploitation of vulnerabilities, and unauthorized access attempts.

Recommended Mitigations

Keep systems patched, implement intrusion detection, and follow security best practices.

Behavioral Analysis

Activity Pattern: Sporadic

Irregular burst activity pattern indicates intermittent use of a compromised system.

First Observed 17. June 2026
Last Activity 16. July 2026
Recent (7 days) 137 incidents

Reputable Network

This IP is hosted on a network (ASN 61436) with generally good reputation. The ISP INTEX ltd. maintains standard security practices.

The malicious activity may represent an isolated compromised system rather than systematic abuse.

Security Recommendations

Implement adaptive blocking rules.

This analysis is automatically generated from aggregated, anonymized threat intelligence data. No personal information is displayed or stored. Assessment accuracy depends on available data volume and diversity.

Reputation Summary

Threat Level 8/10 High
Critical
Activity Frequency 8/10 High
Confidence Score 94% Verified

Confidence History

15. Jul 2026 - 16. Jul 2026
94% Current
Stable Trend

The confidence score shows the reliability of the threat assessment based on the number and quality of reports.

Security Reports (30)

Date Categories Source Confidence
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
New Hacking Honeypot 75%
Hacking Honeypot 75%

Technical Details

Basic Information

IP Address
77.91.118.18
IP Version
IPv4
Network Type
Public
Tor Network
No
Network Class
Class A

Geolocation

Country
RU RU
ASN
AS61436
ISP
INTEX ltd.

DNS Information

Reverse DNS
None
PTR Record
No
Connection Type
Static

Statistics

Total Reports
1,166
First Reported
13 May 2026
Last Reported
16 Jul 2026, 03:11

Comparative Analysis

How this IP compares to others in our threat intelligence database

84 %

Global Threat Ranking

This IP is more threatening than 84% of all IPs in our database.

High Threat Percentile

Global Comparison

Compared against 271,678 reported IPs worldwide

Threat Level 8/10 avg: 5.8 +
Total Reports 1,166 avg: 19 ++

Network Comparison

Compared against 6 IPs in ASN 61436

Threat Level 8/10 network avg: 8.5 =
Total Reports 1,166 network avg: 414 ++

Geographic Comparison

Compared against 5,911 IPs in RU

Threat Level 8/10 country avg: 5.7 +
Total Reports 1,166 country avg: 15 ++
Indicators:
++ Much Higher + Higher = Similar - Lower -- Much Lower

Geographic Threat Distribution

254,787 threat incidents tracked globally • Last 24h: 18,187 Logs

FEED

Top Threat Sources

  1. 01
    US
    United States US
    55,930 22%
  2. 02
    IN
    India IN
    41,989 16.5%
  3. 03
    CN
    China CN
    32,230 12.6%
  4. 04
    BR
    Brazil BR
    13,805 5.4%
  5. 05
    DE
    Germany DE
    9,305 3.7%
  6. 06
    SG
    Singapore SG
    7,685 3%
  7. 07
    ID
    Indonesia ID
    7,343 2.9%
  8. 08
    PK
    Pakistan PK
    7,139 2.8%
  9. 09
    RU
    Russia RU THIS IP
    5,910 2.3%
  10. 10
    NL
    Netherlands NL
    5,560 2.2%

+40 more countries

THREAT LEVEL
LOW MED HIGH

Geographic data is aggregated and anonymized. No personal information displayed.

Map: simplemaps.com (MIT License)

Related IPs

Other IPs associated with this address through network or behavioral similarity

Export & Firewall Rules

Download threat data or generate firewall rules to block this IP

JSON Report

Structured data format for integration with security tools and SIEM systems.

{
    "ip_address": "77.91.118.18",
    "threat_level": 8,
    "confidence_score": 94,
    "total_reports": 1166,
    "country_code": "RU",
    "isp_name": "INTEX ltd.",
    "asn": "61436",
    "first_reported": "2026-05-13 10:17:39",
    "last_reported": "2026-07-16 03:11:58",
    "exported_at": "2026-07-16T03:17:25+02:00",
    "source": "https://reportedip.de/ip/77.91.118.18/"
}

GDPR Compliant: Exports contain only IP-related threat data. No personal information or reporter details are included.