Check an IP Address, Domain Name, Subnet, or ASN

5.216.4.2 was found in our database!

$ whois 5.216.4.2

country·🇮🇷 Iran

isp·Mobile Communication Company of Iran PLC

asn·AS197207

network·Standard

$ sikker risk 5.216.4.2scoring →

confidence

28%Low

first_seen·Feb 25, 2026

last_seen·23d ago

sessions·1

events·1

$ sikker protocols 5.216.4.2

SSH

1 / 1

$ sikker summary 5.216.4.2

5.216.4.2 has a threat confidence score of 28%. This IP address from Iran (AS197207, Mobile Communication Company of Iran PLC) has been observed in 1 honeypot sessions targeting SSH protocols. First observed on February 25, 2026, most recently active February 25, 2026.

$ sikker primitives 5.216.4.2

ssh_which_command_resolution1 ssh_path_environment_variable_echo1

$ sikker related 5.216.4.2

🇮🇷·More threats fromIran→AS·More threats fromMobile Communication Company of Iran PLC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
89.196.183.177	35%	3
83.121.92.171	23%	1
83.121.246.57	44%	3
188.229.81.137	35%	3
86.55.183.81	35%	3

IP Address	Confidence	Events
77.90.185.17	92%	23,178
172.94.9.253	100%	1,150
192.253.248.136	36%	4
62.60.130.21	94%	95
77.90.185.16	85%	3,107