Check an IP Address, Domain Name, Subnet, or ASN

197.14.55.168 was found in our database!

$ whois 197.14.55.168

country·🇹🇳 Tunisia

city·La Marsa

isp·TUNISIANA

asn·AS37693

network·Standard

$ sikker risk 197.14.55.168scoring →

confidence

99%Very High

first_seen·Mar 26, 2026

last_seen·18d ago

sessions·268

events·268

$ sikker protocols 197.14.55.168

SMB

268 / 268

$ sikker summary 197.14.55.168

197.14.55.168 has a threat confidence score of 99%. This IP address from Tunisia (AS37693, TUNISIANA) has been observed in 268 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 26, 2026, most recently active April 1, 2026.

$ sikker behaviors 197.14.55.168catalog →

highRemcom Remote Execution134x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 197.14.55.168

smb_empty_rpc_call134 smb_ipc_share_access134 smb_remcom_pipe_open134 smb_svcctl_pipe_open134

$ sikker related 197.14.55.168

🇹🇳·More threats fromTunisia→AS·More threats fromTUNISIANA→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
196.179.236.23	81%	216
197.17.32.124	26%	116
196.179.232.251	27%	124
102.110.7.160	38%	180
196.179.217.234	30%	162

IP Address	Confidence	Events
196.203.231.220	49%	482
197.5.145.150	100%	1,389
197.5.145.102	100%	1,259
41.231.85.75	79%	631
196.203.254.3	32%	197