Check an IP Address, Domain Name, Subnet, or ASN

217.128.99.39 was found in our database!

$ whois 217.128.99.39

country·🇫🇷 France

isp·Orange

asn·AS3215

network·Standard

$ sikker risk 217.128.99.39scoring →

confidence

97%Very High

first_seen·Feb 11, 2026

last_seen·1h ago

sessions·68

events·80

$ sikker protocols 217.128.99.39

SMB

68 / 80

$ sikker summary 217.128.99.39

217.128.99.39 has a threat confidence score of 97%. This IP address from France (AS3215, Orange) has been observed in 68 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 11, 2026, most recently active April 15, 2026.

$ sikker behaviors 217.128.99.39catalog →

highRemcom Remote Execution34x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 217.128.99.39

smb_empty_rpc_call34 smb_ipc_share_access34 smb_remcom_pipe_open34 smb_svcctl_pipe_open34 smb_c_share_access2

$ sikker related 217.128.99.39

🇫🇷·More threats fromFrance→AS·More threats fromOrange→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
80.14.99.70	23%	1
92.154.95.236	99%	5,331
80.13.153.140	100%	5,850
90.25.145.86	99%	60
80.11.126.120	68%	3

IP Address	Confidence	Events
173.212.252.39	46%	368
144.91.104.152	96%	1,007
194.163.173.72	96%	1,262
194.163.170.77	99%	78
54.38.41.116	85%	45,354