Check an IP Address, Domain Name, Subnet, or ASN

85.172.111.184 was found in our database!

$ whois 85.172.111.184

country·🇷🇺 Russia

city·Moscow

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 85.172.111.184scoring →

confidence

49%Medium

first_seen·Mar 24, 2026

last_seen·1h ago

sessions·2

events·2

$ sikker protocols 85.172.111.184

TELNET

2 / 2

$ sikker summary 85.172.111.184

85.172.111.184 has a threat confidence score of 49%. This IP address from Russia (AS12389, Rostelecom) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 24, 2026, most recently active March 27, 2026.

$ sikker primitives 85.172.111.184

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation2 telnet_command_sh1 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1

$ sikker related 85.172.111.184

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
212.124.19.100	46%	7
2.60.252.90	46%	291
2.63.211.145	79%	20,753
176.211.0.98	37%	6
83.239.171.226	44%	443

IP Address	Confidence	Events
84.54.203.130	18%	36
93.171.72.170	19%	10
92.244.229.7	30%	97
85.174.193.87	39%	4
212.33.235.243	100%	1,193