Check an IP Address, Domain Name, Subnet, or ASN

31.28.15.72 was found in our database!

$ whois 31.28.15.72

country·🇷🇺 Russia

isp·Citytelecom LLC

asn·AS29076

network·Standard

$ sikker risk 31.28.15.72scoring →

confidence

43%Medium

first_seen·Feb 14, 2026

last_seen·7d ago

sessions·9

events·9

$ sikker protocols 31.28.15.72

TELNET

9 / 9

$ sikker summary 31.28.15.72

31.28.15.72 has a threat confidence score of 43%. This IP address from Russia (AS29076, Citytelecom LLC) has been observed in 9 honeypot sessions targeting TELNET protocols. First observed on February 14, 2026, most recently active March 15, 2026.

$ sikker primitives 31.28.15.72

telnet_command_enable6 telnet_command_system6 telnet_command_sh4 telnet_command_shell3 telnet_command_cd2 telnet_command_ping2 telnet_command_linuxshell2 telnet_busybox_binary_invocation2 telnet_system_command_invocation1

$ sikker related 31.28.15.72

🇷🇺·More threats fromRussia→AS·More threats fromCitytelecom LLC→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
31.28.9.212	21%	40
185.233.94.99	26%	52
213.184.150.254	28%	78
91.207.24.11	20%	35
31.28.10.93	28%	9

IP Address	Confidence	Events
188.127.250.113	34%	10
80.66.83.43	100%	4,671
77.94.120.206	100%	7,959
178.46.188.203	33%	157
2.60.126.66	30%	117