Check an IP Address, Domain Name, Subnet, or ASN

138.94.234.120 was found in our database!

$ whois 138.94.234.120

country·🇧🇷 Brazil

city·Belém

isp·RAPIX INTERNET

asn·AS262887

network·Standard

$ sikker risk 138.94.234.120scoring →

confidence

62%High

first_seen·Mar 5, 2026

last_seen·1d ago

sessions·3

events·3

$ sikker protocols 138.94.234.120

TELNET

3 / 3

$ sikker summary 138.94.234.120

138.94.234.120 has a threat confidence score of 62%. This IP address from Brazil (AS262887, RAPIX INTERNET) has been observed in 3 honeypot sessions targeting TELNET protocols. First observed on March 5, 2026, most recently active March 20, 2026.

$ sikker primitives 138.94.234.120

telnet_command_cd33 telnet_busybox_echo_redirect_file_create33 telnet_shell_execute_writable_hidden_file33 telnet_busybox_binary_invocation8 telnet_command_sh6 telnet_command_ping3 telnet_command_shell3 telnet_command_enable3 telnet_command_system3 telnet_command_linuxshell3 telnet_busybox_hostname_set3 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 138.94.234.120

🇧🇷·More threats fromBrazil→AS·More threats fromRAPIX INTERNET→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
138.94.234.104	78%	8
177.23.17.1	93%	213
177.23.17.21	82%	8
186.208.246.110	73%	6
177.23.17.28	66%	3

IP Address	Confidence	Events
200.150.119.62	43%	332
187.92.185.234	52%	12
200.129.167.17	23%	1
177.190.67.44	77%	140
138.97.14.210	40%	257