Check an IP Address, Domain Name, Subnet, or ASN

5.155.12.40 was found in our database!

$ whois 5.155.12.40

country·🇸🇾 Syria

isp·Syrian Telecommunication Private Closed Joint Stock Company

asn·AS29256

network·Standard

$ sikker risk 5.155.12.40scoring →

confidence

41%Medium

first_seen·Apr 25, 2026

last_seen·2h ago

sessions·2

events·2

$ sikker protocols 5.155.12.40

ELASTICSEARCH

2 / 2

$ sikker summary 5.155.12.40

5.155.12.40 has a threat confidence score of 41%. This IP address from Syria (AS29256, Syrian Telecommunication Private Closed Joint Stock Company) has been observed in 2 honeypot sessions targeting ELASTICSEARCH protocols. First observed on April 25, 2026, most recently active April 25, 2026.

$ sikker primitives 5.155.12.40

elastic_http_get_request6 elastic_http_favicon_path_probe4 elastic_root_path_probe2

$ sikker related 5.155.12.40

🇸🇾·More threats fromSyria→AS·More threats fromSyrian Telecommunication Private Closed Joint Stock Company→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
185.225.41.192	100%	190
91.144.21.210	99%	16,096
185.216.134.126	99%	99
193.43.159.102	74%	40
5.155.165.172	68%	23

IP Address	Confidence	Events
185.225.41.192	100%	190
91.144.21.210	99%	16,096
205.209.65.14	46%	4
185.216.134.126	99%	99
193.43.159.102	74%	40