Check an IP Address, Domain Name, Subnet, or ASN

85.12.203.92 was found in our database!

$ whois 85.12.203.92

country·🇷🇺 Russia

city·Yekaterinburg

isp·INSYS LLC

asn·AS28890

network·Standard

$ sikker risk 85.12.203.92scoring →

confidence

56%Medium

first_seen·Feb 20, 2026

last_seen·27d ago

sessions·2

events·2

$ sikker protocols 85.12.203.92

TELNET

2 / 2

$ sikker summary 85.12.203.92

85.12.203.92 has a threat confidence score of 56%. This IP address from Russia (AS28890, INSYS LLC) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on February 20, 2026, most recently active February 21, 2026.

$ sikker primitives 85.12.203.92

telnet_command_sh10 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_unknown_applet_invocation2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2

$ sikker related 85.12.203.92

🇷🇺·More threats fromRussia→AS·More threats fromINSYS LLC→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
46.163.158.56	38%	114
85.12.240.14	52%	424
217.24.185.98	52%	431
91.143.171.185	18%	12
85.12.196.145	22%	40

IP Address	Confidence	Events
45.91.64.7	100%	7,183
178.65.118.194	58%	1
81.29.142.100	100%	27,178
109.107.161.33	36%	2
37.77.150.119	95%	13,868