Check an IP Address, Domain Name, Subnet, or ASN

5.142.168.202 was found in our database!

$ whois 5.142.168.202

country·🇷🇺 Russia

city·Kaliningrad

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 5.142.168.202scoring →

confidence

58%Medium

first_seen·Mar 24, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 5.142.168.202

TELNET

1 / 1

$ sikker summary 5.142.168.202

5.142.168.202 has a threat confidence score of 58%. This IP address from Russia (AS12389, Rostelecom) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 24, 2026, most recently active March 24, 2026.

$ sikker primitives 5.142.168.202

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 5.142.168.202

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
89.109.50.213	34%	22
81.177.122.24	29%	100
188.18.49.2	25%	68
2.63.211.145	79%	20,334
85.192.137.28	30%	65

IP Address	Confidence	Events
82.147.88.2	97%	12,577
81.27.154.109	39%	4
193.124.183.59	23%	1
91.217.81.232	93%	93
5.101.64.6	100%	3,010