Check an IP Address, Domain Name, Subnet, or ASN

181.209.200.154 was found in our database!

$ whois 181.209.200.154

country·🇬🇹 Guatemala

city·Guatemala City

isp·TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA

asn·AS14754

network·Standard

$ sikker risk 181.209.200.154scoring →

confidence

81%Very High

first_seen·Feb 8, 2026

last_seen·23d ago

sessions·15

events·27

$ sikker protocols 181.209.200.154

SMB

15 / 27

$ sikker summary 181.209.200.154

181.209.200.154 has a threat confidence score of 81%. This IP address from Guatemala (AS14754, TELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA) has been observed in 15 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 8, 2026, most recently active March 27, 2026.

$ sikker behaviors 181.209.200.154catalog →

highRemcom Remote Execution7x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 181.209.200.154

smb_empty_rpc_call7 smb_ipc_share_access7 smb_remcom_pipe_open7 smb_svcctl_pipe_open7 smb_c_share_access2

$ sikker related 181.209.200.154

🇬🇹·More threats fromGuatemala→AS·More threats fromTELECOMUNICACIONES DE GUATEMALA, SOCIEDAD ANONIMA→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
190.148.112.242	100%	159
190.56.18.86	36%	72
186.151.109.105	77%	23
190.143.236.40	78%	51
186.77.204.61	76%	21

IP Address	Confidence	Events
190.148.112.242	100%	159
190.56.18.86	36%	72
200.12.40.206	34%	104
181.199.211.161	10%	4
190.143.236.40	78%	51