Check an IP Address, Domain Name, Subnet, or ASN

2.238.250.154 was found in our database!

$ whois 2.238.250.154

country·🇮🇹 Italy

city·Milan

isp·Fastweb

asn·AS12874

network·Standard

$ sikker risk 2.238.250.154scoring →

confidence

75%High

first_seen·Jan 30, 2026

last_seen·29d ago

sessions·6

events·348

$ sikker protocols 2.238.250.154

TELNET

6 / 348

$ sikker summary 2.238.250.154

2.238.250.154 has a threat confidence score of 75%. This IP address from Italy (AS12874, Fastweb) has been observed in 6 honeypot sessions targeting TELNET protocols. First observed on January 30, 2026, most recently active February 15, 2026.

$ sikker primitives 2.238.250.154

telnet_busybox_binary_invocation19 telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_command_sh5 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 2.238.250.154

🇮🇹·More threats fromItaly→AS·More threats fromFastweb→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
93.48.24.181	100%	344
85.18.19.87	9%	2
93.39.83.20	31%	107
93.39.97.203	28%	80
93.42.222.164	63%	1,145

IP Address	Confidence	Events
93.48.24.181	100%	344
85.18.19.87	9%	2
78.134.49.171	100%	666
93.39.83.20	31%	107
185.11.20.2	16%	19