Check an IP Address, Domain Name, Subnet, or ASN

31.28.31.6 was found in our database!

$ whois 31.28.31.6

country·🇷🇺 Russia

isp·Citytelecom LLC

asn·AS29076

network·Standard

$ sikker risk 31.28.31.6scoring →

confidence

23%Low

first_seen·Jan 26, 2026

last_seen·21d ago

sessions·4

events·6

$ sikker protocols 31.28.31.6

HTTP

3 / 5

TELNET

1 / 1

$ sikker summary 31.28.31.6

31.28.31.6 has a threat confidence score of 23%. This IP address from Russia (AS29076, Citytelecom LLC) has been observed in 4 honeypot sessions targeting HTTP, TELNET protocols. First observed on January 26, 2026, most recently active March 1, 2026.

$ sikker behaviors 31.28.31.6catalog →

infoHttp Root Path Request1x

Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.

$ sikker primitives 31.28.31.6

http_method_get1 telnet_command_sh1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1

$ sikker related 31.28.31.6

🇷🇺·More threats fromRussia→AS·More threats fromCitytelecom LLC→HTTP·More threats targetingHTTP→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
31.28.9.212	21%	40
31.28.15.72	43%	9
185.233.94.99	26%	52
213.184.150.254	28%	78
91.207.24.11	20%	35

IP Address	Confidence	Events
79.172.17.2	24%	55
45.91.64.7	100%	7,491
89.179.78.247	52%	450
46.191.180.8	31%	123
178.176.86.241	37%	9