← Back to Dashboard

5.167.211.119 Threat Intelligence Report

Risk Level: CRITICAL — 267 abuse reports from 9 sources

Threat Intelligence Summary

IP address 5.167.211.119 has been flagged in 267 abuse reports across 9 independent threat intelligence sources, resulting in a threat score of 100.0/100 (critical risk). The primary activity associated with this IP is abuseipdb blacklist, along with aggregated threat, attacks, known malicious, malware infrastructure, port scan, rdp bruteforce, reconnaissance, reputation low, suspicious activity.

This IP is geolocated in Russia (St Petersburg) and belongs to the network JSC ER-Telecom Holding (AS51570). Reports span from 2026-09-08 to 2026-10-13.

Assessment: With 267 abuse reports, 5.167.211.119 shows persistent malicious activity that has been flagged by multiple threat intelligence feeds. Systematic port scanning activity from this IP indicates active reconnaissance of internet-facing services, typically a precursor to targeted exploitation.

Data aggregated from 9 independent threat intelligence sources.

Geolocation

Country Russia
City St Petersburg
Region St.-Petersburg
Timezone Europe/Moscow

Threat Status

Overall Status Critical
Threat Score 100.0%
Report Count 267
Sources 9
First Seen 2026-09-08
Last Seen 2026-10-13
AI Analysis

Check IPs automatically with the WAYSCloud API

Free tier: 1,000 lookups/day. Get threat scores, geolocation, and abuse reports via REST API.

Explore the API →

See how we classify and verify threats →

Related Intelligence

Russia Threat Intelligence → AS51570 Network Intelligence → See all top malicious IPs → View latest attacks →
Learn about these threats: