Check an IP Address, Domain Name, Subnet, or ASN

38.252.170.197 was found in our database!

$ whois 38.252.170.197

country·🇺🇸 United States

city·Eureka

isp·Interbel Telephone Cooperative, Inc.

asn·AS1378

network·Standard

$ sikker risk 38.252.170.197scoring →

confidence

75%High

first_seen·Mar 6, 2026

last_seen·5d ago

sessions·6

events·6

$ sikker protocols 38.252.170.197

TELNET

6 / 6

$ sikker summary 38.252.170.197

38.252.170.197 has a threat confidence score of 75%. This IP address from United States (AS1378, Interbel Telephone Cooperative, Inc.) has been observed in 6 honeypot sessions targeting TELNET protocols. First observed on March 6, 2026, most recently active March 20, 2026.

$ sikker primitives 38.252.170.197

telnet_command_cd66 telnet_busybox_echo_redirect_file_create66 telnet_shell_execute_writable_hidden_file66 telnet_busybox_binary_invocation22 telnet_command_sh21 telnet_command_ping6 telnet_command_shell6 telnet_command_enable6 telnet_command_system6 telnet_command_linuxshell6 telnet_busybox_hostname_set6 telnet_busybox_wget_execution5 telnet_sh_execute_downloaded_script5 telnet_busybox_ftpget_remote_file_download5 telnet_busybox_tftp_get_remote_file_stdout5 telnet_curl_remote_script_stdout_execution5

$ sikker related 38.252.170.197

🇺🇸·More threats fromUnited States→AS·More threats fromInterbel Telephone Cooperative, Inc.→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
66.240.205.34	86%	2,051
157.254.223.78	95%	993
216.180.246.138	85%	153
92.118.39.62	100%	378,561
205.210.31.234	93%	333