Check an IP Address, Domain Name, Subnet, or ASN

5.167.76.168 was found in our database!

$ whois 5.167.76.168

country·🇷🇺 Russia

city·Cheboksary

isp·JSC ER-Telecom Holding

asn·AS57026

network·Standard

$ sikker risk 5.167.76.168scoring →

confidence

52%Medium

first_seen·Mar 29, 2026

last_seen·12h ago

sessions·1

events·1

$ sikker protocols 5.167.76.168

TELNET

1 / 1

$ sikker summary 5.167.76.168

5.167.76.168 has a threat confidence score of 52%. This IP address from Russia (AS57026, JSC ER-Telecom Holding) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 29, 2026, most recently active March 29, 2026.

$ sikker primitives 5.167.76.168

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1

$ sikker related 5.167.76.168

🇷🇺·More threats fromRussia→AS·More threats fromJSC ER-Telecom Holding→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
5.165.103.185	80%	10
176.212.94.155	74%	8
5.165.98.211	30%	2

IP Address	Confidence	Events
155.212.161.234	93%	9
82.208.111.249	98%	342
46.191.137.129	44%	6
109.198.109.132	27%	89
185.15.189.232	52%	476