Check an IP Address, Domain Name, Subnet, or ASN

149.154.26.172 was found in our database!

$ whois 149.154.26.172

country·🇺🇸 United States

city·Wilmington

isp·Metronet

asn·AS30600

network·Standard

$ sikker risk 149.154.26.172scoring →

confidence

53%Medium

first_seen·Feb 21, 2026

last_seen·Feb 21, 2026

sessions·1

events·1

$ sikker protocols 149.154.26.172

TELNET

1 / 1

$ sikker summary 149.154.26.172

149.154.26.172 has a threat confidence score of 53%. This IP address from United States (AS30600, Metronet) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on February 21, 2026, most recently active February 21, 2026.

$ sikker primitives 149.154.26.172

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 149.154.26.172

🇺🇸·More threats fromUnited States→AS·More threats fromMetronet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
152.117.111.93	23%	69
149.154.9.27	52%	1
152.117.105.24	53%	1
216.82.43.156	23%	55
217.180.210.33	24%	57

IP Address	Confidence	Events
162.216.149.242	60%	105
138.68.238.177	85%	70
66.132.172.101	96%	183
92.118.39.63	100%	59,830
66.132.186.194	77%	46