Check an IP Address, Domain Name, Subnet, or ASN

5.165.103.185 was found in our database!

$ whois 5.165.103.185

country·🇷🇺 Russia

city·Cheboksary

isp·JSC ER-Telecom Holding

asn·AS57026

network·Standard

$ sikker risk 5.165.103.185scoring →

confidence

80%Very High

first_seen·Mar 29, 2026

last_seen·1h ago

sessions·10

events·10

$ sikker protocols 5.165.103.185

TELNET

10 / 10

$ sikker summary 5.165.103.185

5.165.103.185 has a threat confidence score of 80%. This IP address from Russia (AS57026, JSC ER-Telecom Holding) has been observed in 10 honeypot sessions targeting TELNET protocols. First observed on March 29, 2026, most recently active March 29, 2026.

$ sikker primitives 5.165.103.185

telnet_command_cd63 telnet_shell_output_redirect_file_create63 telnet_command_sh9 telnet_command_su9 telnet_command_shell9 telnet_command_start9 telnet_command_enable9 telnet_command_system9 telnet_command_linuxshell9 telnet_command_config_terminal9 telnet_busybox_echo_hex_payload_write9

$ sikker related 5.165.103.185

🇷🇺·More threats fromRussia→AS·More threats fromJSC ER-Telecom Holding→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
5.167.76.168	52%	1
176.212.94.155	74%	8
5.165.98.211	30%	2

IP Address	Confidence	Events
178.176.87.120	47%	8
79.137.149.35	33%	8
45.91.64.6	100%	15,668
77.39.109.164	29%	96
46.254.24.225	39%	265