Check an IP Address, Domain Name, Subnet, or ASN

90.189.123.170 was found in our database!

$ whois 90.189.123.170

country·🇷🇺 Russia

city·Ust-abakan

isp·Rostelecom

asn·AS12389

network·Standard

$ sikker risk 90.189.123.170scoring →

confidence

79%High

first_seen·Feb 2, 2026

last_seen·1h ago

sessions·18

events·204

$ sikker protocols 90.189.123.170

TELNET

18 / 204

$ sikker summary 90.189.123.170

90.189.123.170 has a threat confidence score of 79%. This IP address from Russia (AS12389, Rostelecom) has been observed in 18 honeypot sessions targeting TELNET protocols. First observed on February 2, 2026, most recently active March 22, 2026.

$ sikker primitives 90.189.123.170

telnet_command_cd55 telnet_busybox_echo_redirect_file_create55 telnet_shell_execute_writable_hidden_file55 telnet_busybox_binary_invocation31 telnet_command_sh23 telnet_command_ping10 telnet_command_shell10 telnet_command_enable10 telnet_command_system10 telnet_command_linuxshell10 telnet_command_iptables_flush5 telnet_rm_recursive_hidden_relative_cleanup5 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 90.189.123.170

🇷🇺·More threats fromRussia→AS·More threats fromRostelecom→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
2.63.211.145	79%	20,087
95.188.74.66	22%	48
212.220.110.22	42%	322
188.16.168.138	20%	43
89.109.14.12	37%	210

IP Address	Confidence	Events
79.104.45.218	29%	108
95.215.0.144	98%	10,134
2.63.211.145	79%	20,088
37.77.150.119	95%	14,058
5.35.52.241	98%	117