Check an IP Address, Domain Name, Subnet, or ASN

213.172.85.127 was found in our database!

$ whois 213.172.85.127

country·🇦🇿 Azerbaijan

city·Baku

isp·az-evro Tel LLC

asn·AS13099

network·Standard

$ sikker risk 213.172.85.127scoring →

confidence

57%Medium

first_seen·Mar 13, 2026

last_seen·Mar 17, 2026

sessions·2

events·2

$ sikker protocols 213.172.85.127

TELNET

2 / 2

$ sikker summary 213.172.85.127

213.172.85.127 has a threat confidence score of 57%. This IP address from Azerbaijan (AS13099, az-evro Tel LLC) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 13, 2026, most recently active March 17, 2026.

$ sikker primitives 213.172.85.127

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_busybox_binary_invocation6 telnet_command_sh4 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_command_iptables_flush2 telnet_rm_recursive_hidden_relative_cleanup2

$ sikker related 213.172.85.127

🇦🇿·More threats fromAzerbaijan→AS·More threats fromaz-evro Tel LLC→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
213.172.74.146	34%	196
213.172.91.112	16%	32
213.172.88.5	22%	46
213.172.95.18	53%	1
213.172.83.195	94%	139

IP Address	Confidence	Events
109.205.211.4	97%	21,656
94.20.234.161	69%	860
37.26.62.197	27%	120
213.154.16.35	31%	186
185.26.184.106	35%	3