Check an IP Address, Domain Name, Subnet, or ASN

5.227.118.140 was found in our database!

$ whois 5.227.118.140

country·🇷🇺 Russia

isp·MTS PJSC

asn·AS8359

network·Standard

$ sikker risk 5.227.118.140scoring →

confidence

74%High

first_seen·Apr 23, 2026

last_seen·6h ago

sessions·11

events·11

$ sikker protocols 5.227.118.140

SSH

11 / 11

$ sikker summary 5.227.118.140

5.227.118.140 has a threat confidence score of 74%. This IP address from Russia (AS8359, MTS PJSC) has been observed in 11 honeypot sessions targeting SSH protocols. First observed on April 23, 2026, most recently active April 26, 2026.

$ sikker primitives 5.227.118.140

ssh_kill_sigkill_target_root_literal20 ssh_readlink_proc_root_exe_resolved_path20 ssh_kill_sigkill_target_systemd_plus_literal15 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai12 ssh_uname_all5 ssh_ps_aux_grep_netai_exclude_grep_count5 ssh_cpu_core_count_via_proc_cpuinfo_pipeline5 ssh_kill_sigkill_target_message_plus_literal5 ssh_top_10_processes_by_cpu_via_ps_sorted_desc5 ssh_readlink_proc_message_plus_exe_resolved_path5 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo5 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec5 ssh_create_user_systemd_watcher_netai_service_and_enable_now5

$ sikker related 5.227.118.140

🇷🇺·More threats fromRussia→AS·More threats fromMTS PJSC→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
178.141.243.241	100%	11
94.243.14.99	100%	25
94.243.10.26	100%	42
94.243.14.120	82%	12
94.243.10.83	23%	1

IP Address	Confidence	Events
45.91.64.7	100%	11,446
62.183.82.70	50%	546
95.215.0.144	100%	14,625
178.178.194.192	49%	495
45.91.64.8	96%	2,834