Check an IP Address, Domain Name, Subnet, or ASN

94.253.91.154 was found in our database!

$ whois 94.253.91.154

country·🇷🇺 Russia

isp·Ivanteevskie telecommunicacii Ltd

asn·AS48149

network·Standard

$ sikker risk 94.253.91.154scoring →

confidence

79%High

first_seen·Feb 23, 2026

last_seen·1h ago

first_reported·Mar 18, 2026

last_reported·3d ago

sessions·10

events·10

reports·1

$ sikker protocols 94.253.91.154

TELNET

10 / 10 / 1r

$ sikker summary 94.253.91.154

94.253.91.154 has a threat confidence score of 79%. This IP address from Russia (AS48149, Ivanteevskie telecommunicacii Ltd) has been observed in 10 honeypot sessions and reported 1 times targeting TELNET protocols. First observed on February 23, 2026, most recently active March 21, 2026.

$ sikker primitives 94.253.91.154

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh13 telnet_busybox_binary_invocation8 telnet_command_ping7 telnet_command_shell7 telnet_command_enable7 telnet_command_system7 telnet_command_linuxshell7 telnet_busybox_hostname_set2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker reports 94.253.91.154submit →

Showing 1 of 1 report from 1 contributor

Reporter	Date	Category	Protocol	Comment
User	Mar 18, 2026, 14:47	Brute Force	TELNET	SikkerGuard: 4 blocked packets

$ sikker related 94.253.91.154

🇷🇺·More threats fromRussia→AS·More threats fromIvanteevskie telecommunicacii Ltd→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
109.207.94.146	57%	18
109.207.80.62	22%	27
109.207.91.120	21%	35

IP Address	Confidence	Events
2.63.211.145	79%	19,913
45.91.64.7	100%	7,364
84.53.198.80	49%	9
217.149.191.246	52%	446
46.191.141.152	100%	5,468