Check an IP Address, Domain Name, Subnet, or ASN

189.94.235.238 was found in our database!

$ whois 189.94.235.238

country·🇧🇷 Brazil

isp·Claro SA

asn·AS22085

network·Standard

$ sikker risk 189.94.235.238scoring →

confidence

67%High

first_seen·Mar 7, 2026

last_seen·15d ago

sessions·2

events·2

$ sikker protocols 189.94.235.238

TELNET

2 / 2

$ sikker summary 189.94.235.238

189.94.235.238 has a threat confidence score of 67%. This IP address from Brazil (AS22085, Claro SA) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 7, 2026, most recently active March 9, 2026.

$ sikker primitives 189.94.235.238

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh10 telnet_busybox_binary_invocation10 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 189.94.235.238

🇧🇷·More threats fromBrazil→AS·More threats fromClaro SA→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
177.56.87.196	19%	6
191.244.132.80	23%	1
187.25.242.99	23%	1
187.70.10.29	65%	8
191.244.193.62	27%	1

IP Address	Confidence	Events
43.157.142.101	43%	98
43.157.148.38	38%	91
177.46.168.8	62%	2
201.63.223.141	93%	9
177.72.87.7	50%	381