Check an IP Address, Domain Name, Subnet, or ASN

38.172.56.25 was found in our database!

$ whois 38.172.56.25

country·🇻🇪 Venezuela

city·Barcelona

isp·GRUPO TECNOLIFE, C.A.

asn·AS272955

network·Standard

$ sikker risk 38.172.56.25scoring →

confidence

49%Medium

first_seen·Feb 24, 2026

last_seen·7d ago

sessions·9

events·9

$ sikker protocols 38.172.56.25

MSSQL

6 / 6

MYSQL

3 / 3

$ sikker summary 38.172.56.25

38.172.56.25 has a threat confidence score of 49%. This IP address from Venezuela (AS272955, GRUPO TECNOLIFE, C.A.) has been observed in 9 honeypot sessions targeting MSSQL, MYSQL protocols. First observed on February 24, 2026, most recently active March 30, 2026.

$ sikker behaviors 38.172.56.25catalog →

mediumMssql Server Capability Enumeration Sequence2x

MSSQL session sequence performing automated server reconnaissance through multiple sp_server_info calls, case-sensitivity probing, charset and configuration enumeration from master.dbo tables, and session environment adjustments (set textsize, set arithabort on). The observed queries indicate scripted capability discovery and environment profiling based strictly on database command activity.

$ sikker primitives 38.172.56.25

mssql_command_sp_server_info8 mssql_command_set_textsize3 mssql_command_set_arithabort_on3 mssql_query_syscharsets_enumeration3 mssql_query_case_sensitivity_probe2

$ sikker related 38.172.56.25

🇻🇪·More threats fromVenezuela→AS·More threats fromGRUPO TECNOLIFE, C.A.→MSSQ·More threats targetingMSSQL→MYSQ·More threats targetingMYSQL→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
38.172.56.24	74%	11
38.172.56.69	54%	8
38.172.56.85	17%	18
38.172.56.83	39%	4
38.172.56.84	18%	27

IP Address	Confidence	Events
201.243.120.51	32%	31
201.208.181.155	33%	37
201.243.119.131	36%	43
181.191.225.152	37%	72
201.243.120.50	30%	26