Check an IP Address, Domain Name, Subnet, or ASN

189.138.207.197 was found in our database!

$ whois 189.138.207.197

country·🇲🇽 Mexico

city·Córdoba

isp·UNINET

asn·AS8151

network·Standard

$ sikker risk 189.138.207.197scoring →

confidence

58%Medium

first_seen·Mar 22, 2026

last_seen·3h ago

sessions·1

events·1

$ sikker protocols 189.138.207.197

TELNET

1 / 1

$ sikker summary 189.138.207.197

189.138.207.197 has a threat confidence score of 58%. This IP address from Mexico (AS8151, UNINET) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 22, 2026, most recently active March 22, 2026.

$ sikker primitives 189.138.207.197

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh4 telnet_busybox_binary_invocation4 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_busybox_hostname_set1 telnet_busybox_wget_execution1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 189.138.207.197

🇲🇽·More threats fromMexico→AS·More threats fromUNINET→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
189.243.228.106	53%	69
187.210.77.100	100%	2,337
189.174.244.193	23%	9
187.174.143.179	32%	136
187.157.29.134	36%	161

IP Address	Confidence	Events
189.243.228.106	53%	69
187.251.242.179	27%	64
187.210.77.100	100%	2,337
189.174.244.193	23%	9
187.174.143.179	32%	136