Check an IP Address, Domain Name, Subnet, or ASN

217.165.229.78 was found in our database!

$ whois 217.165.229.78

country·🇦🇪 United Arab Emirates

city·Sharjah

isp·Emirates Telecommunications Group Company (etisalat Group) Pjsc

asn·AS5384

network·Standard

$ sikker risk 217.165.229.78scoring →

confidence

69%High

first_seen·Apr 2, 2026

last_seen·3h ago

sessions·7

events·7

$ sikker protocols 217.165.229.78

SMB

6 / 6

MSSQL

1 / 1

$ sikker summary 217.165.229.78

217.165.229.78 has a threat confidence score of 69%. This IP address from United Arab Emirates (AS5384, Emirates Telecommunications Group Company (etisalat Group) Pjsc) has been observed in 7 honeypot sessions targeting SMB, MSSQL protocols. Detected attack patterns include remcom remote execution. First observed on April 2, 2026, most recently active April 6, 2026.

$ sikker behaviors 217.165.229.78catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 217.165.229.78

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 217.165.229.78

🇦🇪·More threats fromUnited Arab Emirates→AS·More threats fromEmirates Telecommunications Group Company (etisalat Group) Pjsc→SMB·More threats targetingSMB→MSSQ·More threats targetingMSSQL→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
2.50.173.87	24%	11
217.165.117.201	19%	20
2.50.175.76	86%	11
5.107.13.59	52%	1
92.99.253.96	23%	1

IP Address	Confidence	Events
94.205.250.78	44%	272
20.203.42.204	100%	3,490
2.50.173.87	24%	11
94.204.123.172	49%	416
103.85.112.216	44%	2