Check an IP Address, Domain Name, Subnet, or ASN

138.94.105.64 was found in our database!

$ whois 138.94.105.64

country·🇧🇷 Brazil

city·Ijuí

isp·Fernando B de Oliveira e Cia Ltda

asn·AS264134

network·Standard

$ sikker risk 138.94.105.64scoring →

confidence

95%Very High

first_seen·Apr 27, 2026

last_seen·4m ago

sessions·36

events·36

$ sikker protocols 138.94.105.64

TELNET

36 / 36

$ sikker summary 138.94.105.64

138.94.105.64 has a threat confidence score of 95%. This IP address from Brazil (AS264134, Fernando B de Oliveira e Cia Ltda) has been observed in 36 honeypot sessions targeting TELNET protocols. First observed on April 27, 2026, most recently active April 27, 2026.

$ sikker primitives 138.94.105.64

telnet_rm_absolute_path_file_removal297 telnet_busybox_rm_absolute_path288 telnet_busybox_echo_hex_redirect_write288 telnet_busybox_cat_hidden_absolute_path252 telnet_busybox_unknown_applet_invocation144 telnet_command_cd36 telnet_command_sh36 telnet_command_su36 telnet_command_shell36 telnet_command_system36 telnet_busybox_cat_proc_mounts36 telnet_busybox_rm_hidden_proc_path36 telnet_command_literal_token_zyad500136 telnet_relative_file_output_redirection36 telnet_busybox_chmod_numeric_permission_change36 telnet_command_enable34

$ sikker related 138.94.105.64

🇧🇷·More threats fromBrazil→AS·More threats fromFernando B de Oliveira e Cia Ltda→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
149.102.234.45	82%	1,472
206.42.14.196	100%	828
191.5.65.4	53%	6
31.56.44.87	91%	104
108.165.179.136	96%	2,727