Check an IP Address, Domain Name, Subnet, or ASN

38.172.56.69 was found in our database!

$ whois 38.172.56.69

country·🇻🇪 Venezuela

city·Barcelona

isp·GRUPO TECNOLIFE, C.A.

asn·AS272955

network·Standard

$ sikker risk 38.172.56.69scoring →

confidence

54%Medium

first_seen·Feb 27, 2026

last_seen·5d ago

sessions·8

events·8

$ sikker protocols 38.172.56.69

MSSQL

6 / 6

SMB

2 / 2

$ sikker summary 38.172.56.69

38.172.56.69 has a threat confidence score of 54%. This IP address from Venezuela (AS272955, GRUPO TECNOLIFE, C.A.) has been observed in 8 honeypot sessions targeting MSSQL, SMB protocols. First observed on February 27, 2026, most recently active April 1, 2026.

$ sikker behaviors 38.172.56.69catalog →

mediumMssql Server Capability Enumeration Sequence3x

MSSQL session sequence performing automated server reconnaissance through multiple sp_server_info calls, case-sensitivity probing, charset and configuration enumeration from master.dbo tables, and session environment adjustments (set textsize, set arithabort on). The observed queries indicate scripted capability discovery and environment profiling based strictly on database command activity.

$ sikker primitives 38.172.56.69

mssql_command_sp_server_info9 mssql_command_set_textsize3 mssql_command_set_arithabort_on3 mssql_query_case_sensitivity_probe3 mssql_query_syscharsets_enumeration3

$ sikker related 38.172.56.69

🇻🇪·More threats fromVenezuela→AS·More threats fromGRUPO TECNOLIFE, C.A.→MSSQ·More threats targetingMSSQL→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
38.172.56.24	74%	11
38.172.56.25	49%	9
38.172.56.85	17%	18
38.172.56.83	39%	4
38.172.56.84	18%	27

IP Address	Confidence	Events
201.243.120.51	32%	31
201.208.181.155	33%	37
201.243.119.131	36%	43
181.191.225.152	37%	72
201.243.120.50	30%	26