Check an IP Address, Domain Name, Subnet, or ASN

91.230.168.59 was found in our database!

$ whois 91.230.168.59

country·🇺🇸 United States

city·Hillsboro

isp·ONYPHE SAS

asn·AS213412

network·Standard

$ sikker risk 91.230.168.59scoring →

confidence

36%Low

first_seen·Feb 10, 2026

last_seen·1h ago

sessions·24

events·25

$ sikker protocols 91.230.168.59

SSH

8 / 9

SMTP

5 / 5

HTTPS

3 / 3

SIP

2 / 2

FTP

1 / 1

HTTP

1 / 1

IMAP

1 / 1

MSSQL

1 / 1

POSTGRES

1 / 1

ELASTICSEARCH

1 / 1

$ sikker summary 91.230.168.59

91.230.168.59 has a threat confidence score of 36%. This IP address from United States (AS213412, ONYPHE SAS) has been observed in 24 honeypot sessions targeting SSH, SMTP, HTTPS, SIP, FTP and 5 other protocols. First observed on February 10, 2026, most recently active March 22, 2026.

$ sikker behaviors 91.230.168.59catalog →

infoHttps Root Path Request1x

Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration

$ sikker primitives 91.230.168.59

smtp_ehlo_greeting2 https_path_root1 empty_ftp_command1 elastic_root_path_probe1 elastic_http_get_request1

$ sikker related 91.230.168.59

🇺🇸·More threats fromUnited States→AS·More threats fromONYPHE SAS→SSH·More threats targetingSSH→SMTP·More threats targetingSMTP→HTTP·More threats targetingHTTPS→SIP·More threats targetingSIP→FTP·More threats targetingFTP→HTTP·More threats targetingHTTP→IMAP·More threats targetingIMAP→MSSQ·More threats targetingMSSQL→POST·More threats targetingPOSTGRES→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
91.230.168.212	50%	65
91.230.168.90	70%	74
91.230.168.70	71%	82
91.230.168.148	73%	115
91.230.168.69	78%	104

IP Address	Confidence	Events
3.134.216.108	100%	8,762
67.223.121.152	52%	12
96.0.160.144	87%	21,188
104.22.17.105	20%	194
185.238.231.121	79%	3,674