Check an IP Address, Domain Name, Subnet, or ASN

149.154.9.27 was found in our database!

$ whois 149.154.9.27

country·🇺🇸 United States

city·Lansing

isp·Metronet

asn·AS30600

network·Standard

$ sikker risk 149.154.9.27scoring →

confidence

52%Medium

first_seen·Mar 26, 2026

last_seen·13h ago

sessions·1

events·1

$ sikker protocols 149.154.9.27

TELNET

1 / 1

$ sikker summary 149.154.9.27

149.154.9.27 has a threat confidence score of 52%. This IP address from United States (AS30600, Metronet) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 26, 2026, most recently active March 26, 2026.

$ sikker primitives 149.154.9.27

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1

$ sikker related 149.154.9.27

🇺🇸·More threats fromUnited States→AS·More threats fromMetronet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
152.117.111.93	23%	69
152.117.105.24	53%	1
216.82.43.156	23%	55
217.180.210.33	24%	57
162.221.222.179	89%	883

IP Address	Confidence	Events
157.254.223.78	95%	1,044
162.254.3.130	86%	22,321
64.64.116.19	79%	311
205.251.116.71	95%	1,316
104.234.32.234	63%	317