Check an IP Address, Domain Name, Subnet, or ASN

85.175.20.108 was found in our database!

$ whois 85.175.20.108

country·🇷🇺 Russia

city·Armavir

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 85.175.20.108scoring →

confidence

61%High

first_seen·May 1, 2026

last_seen·4h ago

sessions·13

events·13

$ sikker protocols 85.175.20.108

TELNET

13 / 13

$ sikker summary 85.175.20.108

85.175.20.108 has a threat confidence score of 61%. This IP address from Russia (AS12389, Rostelecom) has been observed in 13 honeypot sessions targeting TELNET protocols. First observed on May 1, 2026, most recently active May 1, 2026.

$ sikker primitives 85.175.20.108

telnet_command_enable6 telnet_command_system6 telnet_command_shell2

$ sikker related 85.175.20.108

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
2.63.211.145	78%	24,416
85.174.193.237	28%	1
176.211.42.202	84%	32
95.167.152.148	23%	1
178.185.136.57	100%	1,282

IP Address	Confidence	Events
81.29.142.6	100%	25,245
81.29.142.100	100%	37,747
2.63.211.145	78%	24,416
91.244.113.178	37%	209
45.91.64.7	100%	11,700