Check an IP Address, Domain Name, Subnet, or ASN

152.117.105.24 was found in our database!

$ whois 152.117.105.24

country·🇺🇸 United States

city·Waterloo

isp·Metronet

asn·AS30600

network·Standard

$ sikker risk 152.117.105.24scoring →

confidence

53%Medium

first_seen·Mar 23, 2026

last_seen·3d ago

sessions·1

events·1

$ sikker protocols 152.117.105.24

TELNET

1 / 1

$ sikker summary 152.117.105.24

152.117.105.24 has a threat confidence score of 53%. This IP address from United States (AS30600, Metronet) has been observed in 1 honeypot sessions targeting TELNET protocols. First observed on March 23, 2026, most recently active March 23, 2026.

$ sikker primitives 152.117.105.24

telnet_command_cd11 telnet_busybox_echo_redirect_file_create11 telnet_shell_execute_writable_hidden_file11 telnet_busybox_binary_invocation3 telnet_command_sh2 telnet_command_ping1 telnet_command_shell1 telnet_command_enable1 telnet_command_system1 telnet_command_linuxshell1 telnet_command_iptables_flush1 telnet_rm_recursive_hidden_relative_cleanup1

$ sikker related 152.117.105.24

🇺🇸·More threats fromUnited States→AS·More threats fromMetronet→TELN·More threats targetingTELNET→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
152.117.111.93	23%	69
149.154.9.27	52%	1
216.82.43.156	23%	55
217.180.210.33	24%	57
162.221.222.179	89%	883

IP Address	Confidence	Events
45.61.184.223	99%	17,940
66.132.224.225	84%	56
172.68.150.189	12%	1
181.215.65.34	55%	16
162.254.3.130	86%	22,326