Check an IP Address, Domain Name, Subnet, or ASN

213.172.83.195 was found in our database!

$ whois 213.172.83.195

country·🇦🇿 Azerbaijan

city·Baku

isp·az-evro Tel LLC

asn·AS13099

network·Standard

$ sikker risk 213.172.83.195scoring →

confidence

94%Very High

first_seen·Jan 21, 2026

last_seen·Feb 28, 2026

sessions·43

events·139

$ sikker protocols 213.172.83.195

SMB

43 / 139

$ sikker summary 213.172.83.195

213.172.83.195 has a threat confidence score of 94%. This IP address from Azerbaijan (AS13099, az-evro Tel LLC) has been observed in 43 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on January 21, 2026, most recently active February 28, 2026.

$ sikker behaviors 213.172.83.195catalog →

highRemcom Remote Execution21x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 213.172.83.195

smb_empty_rpc_call21 smb_ipc_share_access21 smb_remcom_pipe_open21 smb_svcctl_pipe_open21 smb_c_share_access16

$ sikker related 213.172.83.195

🇦🇿·More threats fromAzerbaijan→AS·More threats fromaz-evro Tel LLC→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
213.172.74.146	34%	196
213.172.91.112	16%	32
213.172.88.5	22%	46
213.172.85.127	57%	2
213.172.95.18	53%	1

IP Address	Confidence	Events
109.205.211.4	97%	21,656
94.20.234.161	69%	860
37.26.62.197	27%	120
213.154.16.35	31%	186
185.26.184.106	35%	3