Check an IP Address, Domain Name, Subnet, or ASN

197.151.57.214 was found in our database!

$ whois 197.151.57.214

country·🇪🇬 Egypt

city·Giza

isp·MOBINIL

asn·AS37069

network·Standard

$ sikker risk 197.151.57.214scoring →

confidence

96%Very High

first_seen·Feb 21, 2026

last_seen·26d ago

sessions·35

events·41

$ sikker protocols 197.151.57.214

SMB

35 / 41

$ sikker summary 197.151.57.214

197.151.57.214 has a threat confidence score of 96%. This IP address from Egypt (AS37069, MOBINIL) has been observed in 35 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 21, 2026, most recently active February 22, 2026.

$ sikker behaviors 197.151.57.214catalog →

highRemcom Remote Execution16x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 197.151.57.214

smb_empty_rpc_call16 smb_ipc_share_access16 smb_remcom_pipe_open16 smb_svcctl_pipe_open16

$ sikker related 197.151.57.214

🇪🇬·More threats fromEgypt→AS·More threats fromMOBINIL→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
105.40.176.111	35%	3
45.104.179.82	42%	5
105.40.179.96	44%	6
105.38.231.37	35%	3
45.98.188.2	46%	7

IP Address	Confidence	Events
102.40.32.250	35%	3
196.221.37.40	73%	52
156.215.106.166	39%	4
196.154.212.221	41%	6
197.57.221.135	91%	306