Check an IP Address, Domain Name, Subnet, or ASN

91.196.152.204 was found in our database!

$ whois 91.196.152.204

country·🇫🇷 France

city·Roubaix

isp·ONYPHE SAS

asn·AS213412

network·Standard

$ sikker risk 91.196.152.204scoring →

confidence

36%Low

first_seen·Feb 9, 2026

last_seen·2h ago

sessions·21

events·26

$ sikker protocols 91.196.152.204

SIP

5 / 8

SSH

2 / 3

HTTPS

3 / 3

SMTP

2 / 2

DOCKER

2 / 2

MONGODB

1 / 2

POSTGRES

2 / 2

FTP

1 / 1

HTTP

1 / 1

IMAP

1 / 1

REDIS

1 / 1

$ sikker summary 91.196.152.204

91.196.152.204 has a threat confidence score of 36%. This IP address from France (AS213412, ONYPHE SAS) has been observed in 21 honeypot sessions targeting SIP, SSH, HTTPS, SMTP, DOCKER and 6 other protocols. First observed on February 9, 2026, most recently active March 23, 2026.

$ sikker behaviors 91.196.152.204catalog →

infoHttp Bad Request Route Probe1x

Identifies HTTP GET requests directly targeting the /bad-request path, indicating automated or manual probing of application error-handling routes rather than legitimate navigation flow.

$ sikker primitives 91.196.152.204

docker_get_method2 http_method_get1 smtp_ehlo_greeting1 http_path_bad_request1

$ sikker related 91.196.152.204

🇫🇷·More threats fromFrance→AS·More threats fromONYPHE SAS→SIP·More threats targetingSIP→SSH·More threats targetingSSH→HTTP·More threats targetingHTTPS→SMTP·More threats targetingSMTP→DOCK·More threats targetingDOCKER→MONG·More threats targetingMONGODB→POST·More threats targetingPOSTGRES→FTP·More threats targetingFTP→HTTP·More threats targetingHTTP→IMAP·More threats targetingIMAP→REDI·More threats targetingREDIS→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
91.230.168.25	69%	80
91.230.168.42	37%	28
91.230.168.40	66%	20
91.196.152.76	76%	93
91.196.152.54	72%	122

IP Address	Confidence	Events
51.91.168.102	99%	643,057
54.38.41.116	87%	30,943
51.38.52.190	99%	1,957
92.154.95.236	99%	4,728
51.83.143.139	90%	75,968