Check an IP Address, Domain Name, Subnet, or ASN

38.54.89.62 was found in our database!

$ whois 38.54.89.62

country·🇯🇵 Japan

city·Tokyo

isp·Kaopu Cloud HK Limited

asn·AS138915

network·Standard

$ sikker risk 38.54.89.62scoring →

confidence

93%Very High

first_seen·Apr 11, 2026

last_seen·17d ago

first_reported·Apr 11, 2026

last_reported·18d ago

sessions·9

events·9

reports·1

$ sikker protocols 38.54.89.62

SSH

9 / 9 / 1r

$ sikker summary 38.54.89.62

38.54.89.62 has a threat confidence score of 93%. This IP address from Japan (AS138915, Kaopu Cloud HK Limited) has been observed in 9 honeypot sessions and reported 1 times targeting SSH protocols. Detected attack patterns include ssh authorized keys persistence established. First observed on April 11, 2026, most recently active April 12, 2026.

$ sikker behaviors 38.54.89.62catalog →

very_highSsh Authorized Keys Persistence Established3x

Removal of filesystem attribute protections from the user’s .ssh directory followed by deletion and recreation of the directory and insertion of a new public key into authorized_keys. This pattern reflects deliberate modification of SSH trust configuration to establish persistent key-based access.

$ sikker primitives 38.54.89.62

ssh_authorized_keys_replacement_home3 unix_home_ssh_directory_attribute_modification_attempt3

$ sikker reports 38.54.89.62submit →

Showing 1 of 1 report from 1 contributor

Reporter	Date	Category	Protocol	Comment
Anonymous	Apr 11, 2026, 14:37	Brute Force	SSH	—

$ sikker related 38.54.89.62

🇯🇵·More threats fromJapan→AS·More threats fromKaopu Cloud HK Limited→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
38.54.50.81	95%	4,437
156.244.28.66	29%	57
154.205.145.161	28%	34
154.90.54.142	100%	228
38.54.113.19	31%	63

IP Address	Confidence	Events
133.18.221.82	96%	2,671
13.231.239.44	97%	8,787
152.32.144.212	95%	546
43.165.177.253	95%	550
116.80.72.226	96%	4,858