Check an IP Address, Domain Name, Subnet, or ASN

191.81.154.4 was found in our database!

$ whois 191.81.154.4

country·🇦🇷 Argentina

city·La Plata

isp·Telefonica de Argentina

asn·AS22927

network·Standard

$ sikker risk 191.81.154.4scoring →

confidence

51%Medium

first_seen·Apr 20, 2026

last_seen·2h ago

sessions·3

events·3

$ sikker protocols 191.81.154.4

SSH

3 / 3

$ sikker summary 191.81.154.4

191.81.154.4 has a threat confidence score of 51%. This IP address from Argentina (AS22927, Telefonica de Argentina) has been observed in 3 honeypot sessions targeting SSH protocols. First observed on April 20, 2026, most recently active April 20, 2026.

$ sikker primitives 191.81.154.4

ssh_cpuinfo_name_count_via_wc1 ssh_crontab_list_current_user1 ssh_uname_machine_architecture1 ssh_w_logged_in_users_enumeration1 ssh_authorized_keys_replacement_home1 ssh_free_mem_multi_field_extraction_mb1 ssh_cpuinfo_model_field_subset_extraction1 ssh_chpasswd_password_update_via_echo_pipe1 ssh_ls_binary_path_resolution_and_metadata_listing1 ssh_script_cleanup_process_kill_and_hosts_deny_clear1 unix_home_ssh_directory_attribute_modification_attempt1

$ sikker related 191.81.154.4

🇦🇷·More threats fromArgentina→AS·More threats fromTelefonica de Argentina→SSH·More threats targetingSSH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
191.81.128.168	90%	13
186.134.68.228	39%	4
181.23.108.180	23%	1
181.23.117.144	23%	1
186.57.93.119	43%	15

IP Address	Confidence	Events
190.184.222.63	100%	857
181.30.39.44	73%	4,980
190.3.115.210	84%	86
181.28.27.213	93%	456
186.158.8.121	94%	833