Check an IP Address, Domain Name, Subnet, or ASN

146.158.127.211 was found in our database!

$ whois 146.158.127.211

country·🇷🇺 Russia

city·Penza

isp·SM Ltd.

asn·AS210616

network·Standard

$ sikker risk 146.158.127.211scoring →

confidence

99%Very High

first_seen·Apr 16, 2026

last_seen·2h ago

sessions·174

events·174

$ sikker protocols 146.158.127.211

SMB

174 / 174

$ sikker summary 146.158.127.211

146.158.127.211 has a threat confidence score of 99%. This IP address from Russia (AS210616, SM Ltd.) has been observed in 174 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on April 16, 2026, most recently active April 19, 2026.

$ sikker behaviors 146.158.127.211catalog →

highRemcom Remote Execution59x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 146.158.127.211

smb_empty_rpc_call59 smb_ipc_share_access59 smb_remcom_pipe_open59 smb_svcctl_pipe_open59

$ sikker related 146.158.127.211

🇷🇺·More threats fromRussia→AS·More threats fromSM Ltd.→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
146.158.99.93	100%	25
146.158.117.7	46%	7
146.158.112.197	23%	23
146.158.111.85	35%	3
146.158.111.143	51%	11

IP Address	Confidence	Events
81.29.142.100	100%	34,137
62.148.236.201	77%	20
80.66.83.43	100%	7,780
2.63.211.145	78%	23,218
193.169.5.190	26%	124