5.166.167.144
Activity Trending Down
This IP hasn't received reports recently, which causes the score to decay.
- ISP
- JSC ER-Telecom Holding
- Usage Type
- Fixed Line ISP
- ASN
- AS12768
- Hostname(s)
- 5x166x167x144.dynamic.perm.ertelecom.ru
- Domain Name
- ertelecom.ru
- Country
- 🇷🇺 Russian Federation
- City
- Perm, Perm Krai
Abuse Reports
Total reports
19 from
17 distinct
reporters
First reported
Most recent report
Old reports
The most recent abuse report for this IP address is from
.
It is possible that this IP is no longer involved in abusive activities.
| Reporter | IoA Timestamp (UTC) | Comment | Categories |
|---|---|---|---|
| 🇸🇪 Tsumugi Kotobuki |
Port Scan on Honeypot | Ports: 23/Telnet | Proto: TCP(1) | Flags: all SYN | TTL: 55 | Len: 60B | Win: 65535(1) | rDNS: 5x166x167x144.dynamic.perm.ertelecom.ru | F2B/ufw-honeypot@2026-10-15T15:50:03Z
|
Port Scan Hacking | |
| 🇺🇸 uhhhhhhyeahnotanythingthatislikemyotheraccountsanywhereelse |
4 login or exploit attempts on SSH/22, 2026-10-14 19:27-19:28 UTC
|
Brute-Force SSH | |
| 🇬🇧 KTSTechnology |
Repeated connection attempts to firewalled ports, detected by our ISP firewall Interconnect WL
|
Port Scan | |
| 🇫🇮 mikkopal88 |
TCP SYN port scan to SSH 22
|
Port Scan SSH | |
| 🇺🇸 anon333 |
Hacker syslog review 1791984845
|
Hacking | |
| 🇬🇧 wiredalter |
Blocked by fail2ban on gVPS [23/tcp]
Source Port: 50674
TTL: 54
Packet Length: 60
TOS: 0x00
Analyzed by https://ip.wiredalter.com
|
Brute-Force SSH | |
| 🇺🇸 thefuzz4 |
SSH tarpit (endlessh): 2 unsolicited connection(s) to port 22. Automated report.
|
Brute-Force SSH | |
| 🇵🇱 axiomofchoice.xyz |
endlessh trap: attempts=2 total_time_stuck=1061.06s
|
Port Scan SSH Hacking | |
| 🇵🇱 axiomofchoice.xyz |
endlessh trap: attempts=2 total_time_stuck=1061.06s
|
Port Scan SSH Hacking | |
| 🇵🇱 axiomofchoice.xyz |
endlessh trap: attempts=2 total_time_stuck=1061.06s
|
Port Scan SSH Hacking | |
| 🇧🇾 stroytrest |
2026-10-11T19:06:38.238001+03:00 gate kernel: [797088.127658] nftables: JAIL-TELNET IN=wan OUT= MAC= SRC=5.166.167.144 DST=xxx.xxx.xxx.xxx LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=33953 DF PROTO=TCP SPT=44472 DPT=23 WINDOW=65535 RES=0x00 SYN URGP=0
...
|
Port Scan | |
| 🇫🇷 security.rdmc.fr |
Port Scan Attack proto:TCP src:38556 dst:23
|
Port Scan | |
| 🇺🇸 Cyber Crusader |
Hundreds of Attempts (at least) to Connect to and Access Firewall Ports
|
Port Scan Hacking Brute-Force | |
| 🇦🇺 PetePK |
Probed 4 time(s): TCP/23, TCP/22
|
Port Scan | |
| 🇰🇷 winter |
Connection attemp from 5.166.167.144 to port 22
|
Brute-Force SSH |
Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown