Check an IP Address, Domain Name, Subnet, or ASN

86.38.24.97 was found in our database!

$ whois 86.38.24.97

country·🇷🇴 Romania

isp·Elisteka UAB

asn·AS214208

network·Standard

$ sikker risk 86.38.24.97scoring →

confidence

97%Very High

first_seen·Apr 16, 2026

last_seen·10d ago

sessions·238

events·238

$ sikker protocols 86.38.24.97

SSH

238 / 238

$ sikker summary 86.38.24.97

86.38.24.97 has a threat confidence score of 97%. This IP address from Romania (AS214208, Elisteka UAB) has been observed in 238 honeypot sessions targeting SSH protocols. First observed on April 16, 2026, most recently active April 19, 2026.

$ sikker primitives 86.38.24.97

ssh_kill_sigkill_target_root_literal840 ssh_readlink_proc_root_exe_resolved_path840 ssh_kill_sigkill_target_systemd_plus_literal630 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_then_cat_to_netai619 ssh_uname_all210 ssh_ps_aux_grep_netai_exclude_grep_count210 ssh_cpu_core_count_via_proc_cpuinfo_pipeline210 ssh_kill_sigkill_target_message_plus_literal210 ssh_top_10_processes_by_cpu_via_ps_sorted_desc210 ssh_readlink_proc_message_plus_exe_resolved_path210 ssh_cd_dev_shm_tmp_var_run_mnt_root_fallback_pwd_echo210 ssh_cd_tmp_create_w_sh_if_missing_via_stdin_and_chmod_exec210 ssh_create_user_systemd_watcher_netai_service_and_enable_now210 ssh_crontab_persist_tmp_w_sh_with_reboot_and_hourly_execution_if_missing106

$ sikker related 86.38.24.97

🇷🇴·More threats fromRomania→AS·More threats fromElisteka UAB→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
86.38.24.201	87%	87
45.91.7.59	96%	98

IP Address	Confidence	Events
80.94.92.165	100%	232,744
80.94.92.167	100%	332,583
2.57.121.112	95%	54,234
193.46.255.86	87%	4,988
45.142.193.6	67%	278