Check an IP Address, Domain Name, Subnet, or ASN

85.172.101.182 was found in our database!

$ whois 85.172.101.182

country·🇷🇺 Russia

city·Krasnodar

isp·Rostelecom

asn·AS25490

network·Standard

$ sikker risk 85.172.101.182scoring →

confidence

55%Medium

first_seen·Mar 29, 2026

last_seen·15h ago

sessions·2

events·2

$ sikker protocols 85.172.101.182

TELNET

2 / 2

$ sikker summary 85.172.101.182

85.172.101.182 has a threat confidence score of 55%. This IP address from Russia (AS25490, Rostelecom) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 29, 2026, most recently active March 31, 2026.

$ sikker primitives 85.172.101.182

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation3 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_command_iptables_flush1

$ sikker related 85.172.101.182

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
85.172.103.215	54%	14
83.239.89.22	37%	212
83.239.108.124	34%	197
83.239.0.202	51%	476
85.175.0.227	24%	73

IP Address	Confidence	Events
87.117.19.162	19%	49
2.63.211.145	79%	21,451
5.141.88.245	34%	196
188.170.78.98	44%	6
188.94.32.135	36%	1