Check an IP Address, Domain Name, Subnet, or ASN

96.51.38.22 was found in our database!

$ whois 96.51.38.22

country·🇨🇦 Canada

city·Lethbridge

isp·Shaw Communications

asn·AS6327

network·Standard

$ sikker risk 96.51.38.22scoring →

confidence

58%Medium

first_seen·Mar 27, 2026

last_seen·2h ago

sessions·2

events·2

$ sikker protocols 96.51.38.22

TELNET

2 / 2

$ sikker summary 96.51.38.22

96.51.38.22 has a threat confidence score of 58%. This IP address from Canada (AS6327, Shaw Communications) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 27, 2026, most recently active March 29, 2026.

$ sikker primitives 96.51.38.22

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_busybox_binary_invocation6 telnet_command_sh4 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_command_iptables_flush2 telnet_rm_recursive_hidden_relative_cleanup2

$ sikker related 96.51.38.22

🇨🇦·More threats fromCanada→AS·More threats fromShaw Communications→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
50.67.177.253	36%	54
70.65.44.183	100%	1,127
24.76.44.3	67%	6
24.83.60.18	81%	465
68.151.1.196	95%	672

IP Address	Confidence	Events
20.63.96.180	54%	20
165.227.39.77	30%	2
96.1.40.151	65%	435
15.156.234.60	58%	1,178
159.203.38.139	23%	1