Check an IP Address, Domain Name, Subnet, or ASN

138.94.234.104 was found in our database!

$ whois 138.94.234.104

country·🇧🇷 Brazil

city·Belém

isp·RAPIX INTERNET

asn·AS262887

network·Standard

$ sikker risk 138.94.234.104scoring →

confidence

78%High

first_seen·Mar 8, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 138.94.234.104

TELNET

8 / 8

$ sikker summary 138.94.234.104

138.94.234.104 has a threat confidence score of 78%. This IP address from Brazil (AS262887, RAPIX INTERNET) has been observed in 8 honeypot sessions targeting TELNET protocols. First observed on March 8, 2026, most recently active March 21, 2026.

$ sikker primitives 138.94.234.104

telnet_command_cd88 telnet_busybox_echo_redirect_file_create88 telnet_shell_execute_writable_hidden_file88 telnet_busybox_binary_invocation30 telnet_command_sh29 telnet_command_ping8 telnet_command_shell8 telnet_command_enable8 telnet_command_system8 telnet_command_linuxshell8 telnet_busybox_hostname_set8 telnet_busybox_wget_execution7 telnet_sh_execute_downloaded_script7 telnet_busybox_ftpget_remote_file_download7 telnet_busybox_tftp_get_remote_file_stdout7 telnet_curl_remote_script_stdout_execution7

$ sikker related 138.94.234.104

🇧🇷·More threats fromBrazil→AS·More threats fromRAPIX INTERNET→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
177.23.17.1	93%	213
138.94.234.120	62%	3
177.23.17.21	82%	8
186.208.246.110	73%	6
177.23.17.28	66%	3

IP Address	Confidence	Events
201.71.157.40	38%	214
167.250.224.25	81%	222
189.120.240.60	98%	80
177.83.48.162	27%	87
200.143.107.150	29%	93