Check an IP Address, Domain Name, Subnet, or ASN

191.5.38.92 was found in our database!

$ whois 191.5.38.92

country·🇧🇷 Brazil

city·Brumadinho

isp·SEMPRE TELECOMUNICACOES LTDA

asn·AS28198

network·Standard

$ sikker risk 191.5.38.92scoring →

confidence

38%Low

first_seen·Mar 4, 2026

last_seen·8d ago

sessions·2

events·2

$ sikker protocols 191.5.38.92

TELNET

2 / 2

$ sikker summary 191.5.38.92

191.5.38.92 has a threat confidence score of 38%. This IP address from Brazil (AS28198, SEMPRE TELECOMUNICACOES LTDA) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 4, 2026, most recently active March 13, 2026.

$ sikker primitives 191.5.38.92

telnet_command_sh4 telnet_busybox_unknown_applet_invocation4 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_wget_execution2

$ sikker related 191.5.38.92

🇧🇷·More threats fromBrazil→AS·More threats fromSEMPRE TELECOMUNICACOES LTDA→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
128.201.177.89	77%	6
177.66.50.122	35%	3
177.137.154.196	75%	6

IP Address	Confidence	Events
167.250.224.25	81%	218
200.170.212.238	39%	4
45.238.64.150	32%	136
45.169.128.70	100%	737
187.49.63.41	40%	153