Check an IP Address, Domain Name, Subnet, or ASN

144.2.91.96 was found in our database!

$ whois 144.2.91.96

country·🇨🇭 Switzerland

city·Bramois

isp·Bluewin

asn·AS3303

network·Standard

$ sikker risk 144.2.91.96scoring →

confidence

77%High

first_seen·Mar 26, 2026

last_seen·14h ago

sessions·5

events·5

$ sikker protocols 144.2.91.96

SSH

5 / 5

$ sikker summary 144.2.91.96

144.2.91.96 has a threat confidence score of 77%. This IP address from Switzerland (AS3303, Bluewin) has been observed in 5 honeypot sessions targeting SSH protocols. Detected attack patterns include ssh routeros cloud probe and telegram sms artifact discovery. First observed on March 26, 2026, most recently active April 2, 2026.

$ sikker behaviors 144.2.91.96catalog →

highSsh Routeros Cloud Probe And Telegram Sms Artifact Discovery4x

SSH post-auth sequence running RouterOS cloud/DDNS commands, Telegram data path checks, GSM/SMS artifact searches, and miner process lookups (`ps | grep miner`), preceded by basic system enumeration.

$ sikker primitives 144.2.91.96

ssh_routeros_ip_cloud_print_probe8 ssh_uname_all4 ssh_cat_proc_cpuinfo4 ssh_ps_ef_grep_miner_bracket_case4 ssh_ifconfig_interface_enumeration4 ssh_routeros_user_set_password_id04 ssh_echo_hi_pipe_cat_numbering_test4 ssh_locate_telegram_tdata_identifier4 ssh_routeros_interface_lte_print_probe4 ssh_routeros_ip_cloud_set_ddns_enabled4 ssh_ps_pipe_grep_miner_case_insensitive4 ssh_ls_telegram_tdata_and_gsm_sms_artifacts4

$ sikker related 144.2.91.96

🇨🇭·More threats fromSwitzerland→AS·More threats fromBluewin→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
188.61.165.47	27%	1
85.6.200.178	21%	4
178.196.109.24	27%	1
188.60.121.113	23%	1
83.77.44.235	23%	1

IP Address	Confidence	Events
179.43.150.26	100%	58,521
35.216.254.237	93%	2,192
35.216.140.3	100%	2,215
179.43.146.226	79%	35
179.43.139.58	83%	8,181