Check an IP Address, Domain Name, Subnet, or ASN

81.10.42.109 was found in our database!

$ whois 81.10.42.109

country·🇪🇬 Egypt

city·Ismailia

isp·TE Data

asn·AS8452

network·Standard

$ sikker risk 81.10.42.109scoring →

confidence

86%Very High

first_seen·Jan 28, 2026

last_seen·1h ago

sessions·56

events·68

$ sikker protocols 81.10.42.109

SMB

56 / 68

$ sikker summary 81.10.42.109

81.10.42.109 has a threat confidence score of 86%. This IP address from Egypt (AS8452, TE Data) has been observed in 56 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on January 28, 2026, most recently active March 25, 2026.

$ sikker behaviors 81.10.42.109catalog →

highRemcom Remote Execution10x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 81.10.42.109

smb_empty_rpc_call10 smb_ipc_share_access10 smb_remcom_pipe_open10 smb_svcctl_pipe_open10 smb_c_share_access2

$ sikker related 81.10.42.109

🇪🇬·More threats fromEgypt→AS·More threats fromTE Data→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
196.218.36.180	21%	42
196.218.151.226	23%	60
81.10.98.82	46%	279
197.59.33.72	50%	12
156.197.224.52	39%	4

IP Address	Confidence	Events
196.221.149.252	26%	90
196.218.36.180	21%	42
196.218.151.226	23%	60
81.10.98.82	46%	279
197.59.33.72	50%	12