Check an IP Address, Domain Name, Subnet, or ASN

196.196.52.5 was found in our database!

$ whois 196.196.52.5

country·🇱🇻 Latvia

city·Riga

isp·Orion Network Limited

asn·AS41564

network·Standard

$ sikker risk 196.196.52.5scoring →

confidence

77%High

first_seen·Mar 26, 2026

last_seen·1h ago

sessions·50

events·50

$ sikker protocols 196.196.52.5

HTTPS

32 / 32

HTTP

18 / 18

$ sikker summary 196.196.52.5

196.196.52.5 has a threat confidence score of 77%. This IP address from Latvia (AS41564, Orion Network Limited) has been observed in 50 honeypot sessions targeting HTTPS, HTTP protocols. First observed on March 26, 2026, most recently active March 26, 2026.

$ sikker behaviors 196.196.52.5catalog →

infoHttp Root Path Request9x

Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.

infoHttps Root Path Request1x

Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration

$ sikker primitives 196.196.52.5

http_method_get17 https_path_root3 http_path_dotenv2 http_path_dotgit_config1 http_path_doc_page_login_asp_access1

$ sikker related 196.196.52.5

🇱🇻·More threats fromLatvia→AS·More threats fromOrion Network Limited→HTTP·More threats targetingHTTPS→HTTP·More threats targetingHTTP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
196.196.53.101	32%	5
196.196.52.6	87%	52
89.251.0.108	68%	37
89.251.0.109	42%	3
2.57.169.3	36%	2

IP Address	Confidence	Events
196.196.53.101	32%	5
196.196.52.6	87%	52
162.158.48.149	2%	2
162.158.48.185	19%	8
162.158.48.184	17%	7