Check an IP Address, Domain Name, Subnet, or ASN

91.196.152.233 was found in our database!

$ whois 91.196.152.233

country·🇫🇷 France

city·Roubaix

isp·ONYPHE SAS

asn·AS213412

network·Standard

$ sikker risk 91.196.152.233scoring →

confidence

49%Medium

first_seen·Feb 7, 2026

last_seen·1h ago

sessions·29

events·32

$ sikker protocols 91.196.152.233

SSH

7 / 9

SIP

4 / 4

SMTP

2 / 3

HTTPS

3 / 3

DOCKER

3 / 3

HTTP

2 / 2

IMAP

2 / 2

RDP

1 / 1

SMB

1 / 1

RTSP

1 / 1

REDIS

1 / 1

TELNET

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 91.196.152.233

91.196.152.233 has a threat confidence score of 49%. This IP address from France (AS213412, ONYPHE SAS) has been observed in 29 honeypot sessions targeting SSH, SIP, SMTP, HTTPS, DOCKER and 8 other protocols. First observed on February 7, 2026, most recently active March 23, 2026.

$ sikker behaviors 91.196.152.233catalog →

lowRtsp Options Probe1x

Client sends RTSP OPTIONS requests to check supported methods and confirm that an RTSP service is exposed, then disconnects without attempting authentication or stream setup. This pattern is typically associated with automated reconnaissance or internet-wide scanning rather than active stream access.

infoHttp Bad Request Route Probe1x

Identifies HTTP GET requests directly targeting the /bad-request path, indicating automated or manual probing of application error-handling routes rather than legitimate navigation flow.

$ sikker primitives 91.196.152.233

docker_get_method3 rtsp_options1 http_method_get1 http_path_bad_request1 elastic_http_get_request1 elastic_http_bad_request_path_probe1

$ sikker related 91.196.152.233

Report IP WHOIS Lookup →

IP Address	Confidence	Events
91.196.152.72	77%	93
91.196.152.79	74%	75
195.184.76.135	86%	94
195.184.76.93	57%	78
91.196.152.55	90%	80

IP Address	Confidence	Events
172.71.127.128	17%	8
51.83.143.139	90%	75,445
51.91.168.102	99%	640,674
54.38.41.116	87%	30,260
92.154.95.236	99%	4,704