Check an IP Address, Domain Name, Subnet, or ASN

109.227.138.224 was found in our database!

$ whois 109.227.138.224

country·🇪🇸 Spain

city·Madrid

isp·Xtra Telecom S.A.

asn·AS15704

network·Standard

$ sikker risk 109.227.138.224scoring →

confidence

66%High

first_seen·Mar 15, 2026

last_seen·2d ago

sessions·2

events·2

$ sikker protocols 109.227.138.224

TELNET

2 / 2

$ sikker summary 109.227.138.224

109.227.138.224 has a threat confidence score of 66%. This IP address from Spain (AS15704, Xtra Telecom S.A.) has been observed in 2 honeypot sessions targeting TELNET protocols. First observed on March 15, 2026, most recently active March 18, 2026.

$ sikker primitives 109.227.138.224

telnet_command_cd22 telnet_busybox_echo_redirect_file_create22 telnet_shell_execute_writable_hidden_file22 telnet_command_sh8 telnet_busybox_binary_invocation8 telnet_command_ping2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 telnet_command_linuxshell2 telnet_busybox_hostname_set2 telnet_busybox_wget_execution2 telnet_sh_execute_downloaded_script2 telnet_busybox_ftpget_remote_file_download2 telnet_busybox_tftp_get_remote_file_stdout2 telnet_curl_remote_script_stdout_execution2

$ sikker related 109.227.138.224

🇪🇸·More threats fromSpain→AS·More threats fromXtra Telecom S.A.→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
212.230.117.125	66%	69
212.230.181.127	22%	49
78.30.54.45	14%	6
170.253.56.237	26%	47
212.231.194.62	58%	1

IP Address	Confidence	Events
47.60.155.95	30%	2
34.175.118.185	100%	837
5.182.83.231	100%	2,339
95.39.82.218	95%	28
92.191.96.115	100%	429