Check an IP Address, Domain Name, Subnet, or ASN

178.67.190.42 was found in our database!

$ whois 178.67.190.42

country·🇷🇺 Russia

city·Glebychevo

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 178.67.190.42scoring →

confidence

58%Medium

first_seen·Mar 24, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 178.67.190.42

TELNET

1 / 1

$ sikker summary 178.67.190.42

178.67.190.42 has a threat confidence score of 58%. This IP address from Russia (AS12389, Rostelecom) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 24, 2026, most recently active March 24, 2026.

$ sikker primitives 178.67.190.42

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 178.67.190.42

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
217.9.144.5	19%	36
2.63.211.145	79%	20,283
178.44.252.164	35%	3
82.208.85.183	45%	424
78.29.126.253	33%	158

IP Address	Confidence	Events
176.120.22.61	52%	319
91.240.208.92	99%	647
5.101.64.6	100%	2,989
195.206.62.230	49%	9
81.30.212.94	100%	1,547