Check an IP Address, Domain Name, Subnet, or ASN

190.214.9.243 was found in our database!

$ whois 190.214.9.243

country·🇪🇨 Ecuador

city·Guayas

isp·CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP

asn·AS28006

network·Standard

$ sikker risk 190.214.9.243scoring →

confidence

85%Very High

first_seen·Feb 27, 2026

last_seen·1d ago

sessions·22

events·22

$ sikker protocols 190.214.9.243

SMB

22 / 22

$ sikker summary 190.214.9.243

190.214.9.243 has a threat confidence score of 85%. This IP address from Ecuador (AS28006, CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP) has been observed in 22 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 27, 2026, most recently active April 16, 2026.

$ sikker behaviors 190.214.9.243catalog →

highRemcom Remote Execution10x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 190.214.9.243

smb_empty_rpc_call10 smb_ipc_share_access10 smb_remcom_pipe_open10 smb_svcctl_pipe_open10

$ sikker related 190.214.9.243

🇪🇨·More threats fromEcuador→AS·More threats fromCORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
181.113.168.113	47%	8
181.112.146.18	24%	73
181.113.224.21	36%	262
181.211.220.116	39%	4
200.107.62.11	28%	130

IP Address	Confidence	Events
181.113.168.113	47%	8
181.198.22.246	39%	4
181.198.192.179	30%	2
38.224.81.123	21%	56
172.68.230.155	17%	13