Check an IP Address, Domain Name, Subnet, or ASN

38.189.161.131 was found in our database!

$ whois 38.189.161.131

country·🇺🇸 United States

city·Byhalia

isp·Northcentral Electric Cooperative

asn·AS397836

network·Standard

$ sikker risk 38.189.161.131scoring →

confidence

77%High

first_seen·Jan 31, 2026

last_seen·1h ago

sessions·7

events·125

$ sikker protocols 38.189.161.131

TELNET

7 / 125

$ sikker summary 38.189.161.131

38.189.161.131 has a threat confidence score of 77%. This IP address from United States (AS397836, Northcentral Electric Cooperative) has been observed in 7 honeypot sessions targeting TELNET protocols. First observed on January 31, 2026, most recently active March 21, 2026.

$ sikker primitives 38.189.161.131

telnet_command_cd66 telnet_busybox_echo_redirect_file_create66 telnet_shell_execute_writable_hidden_file66 telnet_busybox_binary_invocation20 telnet_command_sh15 telnet_command_ping6 telnet_command_shell6 telnet_command_enable6 telnet_command_system6 telnet_command_linuxshell6 telnet_command_iptables_flush6 telnet_rm_recursive_hidden_relative_cleanup6 telnet_sh_execute_downloaded_script1 telnet_busybox_ftpget_remote_file_download1 telnet_busybox_tftp_get_remote_file_stdout1 telnet_curl_remote_script_stdout_execution1

$ sikker related 38.189.161.131

🇺🇸·More threats fromUnited States→AS·More threats fromNorthcentral Electric Cooperative→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
20.65.195.63	88%	245
20.163.15.247	77%	146
185.218.138.28	97%	4,551
54.226.226.30	58%	18
38.54.104.5	98%	1,542