Check an IP Address, Domain Name, Subnet, or ASN

138.94.234.91 was found in our database!

$ whois 138.94.234.91

country·🇧🇷 Brazil

city·Belém

isp·RAPIX INTERNET

asn·AS262887

network·Standard

$ sikker risk 138.94.234.91scoring →

confidence

58%Medium

first_seen·Mar 16, 2026

last_seen·5d ago

sessions·1

events·1

$ sikker protocols 138.94.234.91

TELNET

1 / 1

$ sikker summary 138.94.234.91

138.94.234.91 has a threat confidence score of 58%. This IP address from Brazil (AS262887, RAPIX INTERNET) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 16, 2026, most recently active March 16, 2026.

$ sikker primitives 138.94.234.91

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 138.94.234.91

🇧🇷·More threats fromBrazil→AS·More threats fromRAPIX INTERNET→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
177.23.17.1	94%	214
138.94.234.104	78%	8
138.94.234.120	62%	3
177.23.17.21	82%	8
186.208.246.110	73%	6

IP Address	Confidence	Events
177.91.76.89	59%	96
201.28.237.90	44%	159
45.232.73.84	100%	785
177.154.12.52	18%	13
179.48.102.12	36%	1