Check an IP Address, Domain Name, Subnet, or ASN

91.196.152.6 was found in our database!

$ whois 91.196.152.6

country·🇫🇷 France

city·Roubaix

isp·ONYPHE SAS

asn·AS213412

network·Standard

$ sikker risk 91.196.152.6scoring →

confidence

36%Low

first_seen·Jan 23, 2026

last_seen·1h ago

sessions·43

events·54

$ sikker protocols 91.196.152.6

SSH

7 / 12

IMAP

9 / 11

TELNET

4 / 5

SIP

4 / 4

SMB

4 / 4

HTTP

3 / 3

HTTPS

3 / 3

WINRM

1 / 3

FTP

2 / 2

MONGODB

1 / 2

POSTGRES

2 / 2

RTSP

1 / 1

SMTP

1 / 1

REDIS

1 / 1

$ sikker summary 91.196.152.6

91.196.152.6 has a threat confidence score of 36%. This IP address from France (AS213412, ONYPHE SAS) has been observed in 43 honeypot sessions targeting SSH, IMAP, TELNET, SIP, SMB and 9 other protocols. First observed on January 23, 2026, most recently active March 23, 2026.

$ sikker behaviors 91.196.152.6catalog →

infoFtp Tls Upgrade1x

FTP session where the client issues AUTH TLS to upgrade the connection to Transport Layer Security. This reflects protocol-level encryption negotiation prior to further interaction.

$ sikker primitives 91.196.152.6

ftp_auth_tls1

$ sikker related 91.196.152.6

Report IP WHOIS Lookup →

IP Address	Confidence	Events
94.231.206.156	71%	141
94.231.206.153	73%	170
91.196.152.31	91%	97
91.231.89.97	13%	16
91.196.152.238	37%	29

IP Address	Confidence	Events
51.91.168.102	99%	639,108
54.38.41.116	87%	29,714
51.83.143.139	90%	75,082
91.134.5.177	98%	322
161.97.132.79	98%	63,861