Check an IP Address, Domain Name, Subnet, or ASN

2.27.49.23 was found in our database!

$ whois 2.27.49.23

country·🇬🇧 United Kingdom

city·Neath

isp·British Telecommunications PLC

asn·AS2856

network·Standard

$ sikker risk 2.27.49.23scoring →

confidence

93%Very High

first_seen·Apr 5, 2026

last_seen·11d ago

sessions·6

events·6

$ sikker protocols 2.27.49.23

HTTPS

2 / 2

TELNET

2 / 2

SSH

1 / 1

DOCKER

1 / 1

$ sikker summary 2.27.49.23

2.27.49.23 has a threat confidence score of 93%. This IP address from United Kingdom (AS2856, British Telecommunications PLC) has been observed in 6 honeypot sessions targeting HTTPS, TELNET, SSH, DOCKER protocols. First observed on April 5, 2026, most recently active April 8, 2026.

$ sikker primitives 2.27.49.23

php_phpunit_md5_marker74 https_index_php_root_request6 telnet_echo_hex_escape_sequence_output4 https_query_thinkphp_invokefunction_md5_probe4 https_body_wget_curl_pipe_to_sh_apache_selfrep4 https_php_ini_directive_injection_allow_url_include_auto_prepend_file4 docker_post_method3 https_path_root2 telnet_command_sh2 telnet_command_shell2 telnet_command_enable2 telnet_command_system2 docker_container_exec_path2 https_hello_world_path_request2 https_public_index_php_request2 https_cgi_bin_sh_execution_request2 https_phpunit_eval_stdin_rce_probe2 https_php_lfi_tmp_index1_file_request2 php_pearcmd_config_create_md5_hi_marker2 phpunit_eval_stdin_php_header_execution2

$ sikker related 2.27.49.23

🇬🇧·More threats fromUnited Kingdom→AS·More threats fromBritish Telecommunications PLC→HTTP·More threats targetingHTTPS→TELN·More threats targetingTELNET→SSH·More threats targetingSSH→DOCK·More threats targetingDOCKER→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
86.149.181.52	61%	2
109.156.98.67	64%	7
81.134.57.17	24%	78
86.128.181.149	74%	2
86.129.149.225	84%	7

IP Address	Confidence	Events
193.104.222.8	99%	1,240
78.153.140.156	100%	2,528
185.247.137.97	94%	603
87.236.176.125	95%	625
85.11.183.23	89%	1,363