Check an IP Address, Domain Name, Subnet, or ASN

91.196.152.8 was found in our database!

$ whois 91.196.152.8

country·🇫🇷 France

city·Roubaix

isp·ONYPHE SAS

asn·AS213412

network·Standard

$ sikker risk 91.196.152.8scoring →

confidence

56%Medium

first_seen·Jan 24, 2026

last_seen·1h ago

sessions·40

events·57

$ sikker protocols 91.196.152.8

SSH

8 / 12

SIP

8 / 11

RTSP

5 / 10

HTTPS

5 / 7

HTTP

3 / 5

TELNET

2 / 3

SMB

2 / 2

IMAP

2 / 2

POSTGRES

2 / 2

DOCKER

1 / 1

MONGODB

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 91.196.152.8

91.196.152.8 has a threat confidence score of 56%. This IP address from France (AS213412, ONYPHE SAS) has been observed in 40 honeypot sessions targeting SSH, SIP, RTSP, HTTPS, HTTP and 7 other protocols. First observed on January 24, 2026, most recently active March 27, 2026.

$ sikker behaviors 91.196.152.8catalog →

lowRtsp Options Probe4x

Client sends RTSP OPTIONS requests to check supported methods and confirm that an RTSP service is exposed, then disconnects without attempting authentication or stream setup. This pattern is typically associated with automated reconnaissance or internet-wide scanning rather than active stream access.

infoHttp Root Path Request1x

Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.

$ sikker primitives 91.196.152.8

rtsp_options6 http_method_get1 docker_get_method1 elastic_root_path_probe1 elastic_http_get_request1

$ sikker related 91.196.152.8

Report IP WHOIS Lookup →

IP Address	Confidence	Events
91.231.89.131	84%	69
91.231.89.110	70%	72
91.231.89.3	66%	84
91.231.89.206	79%	89
91.231.89.191	85%	90

IP Address	Confidence	Events
54.38.94.109	98%	36,204
51.83.143.139	90%	80,433
109.205.181.136	94%	436
51.91.168.102	99%	660,877
194.163.159.77	95%	854