Check an IP Address, Domain Name, Subnet, or ASN

116.68.74.162 was found in our database!

$ whois 116.68.74.162

country·🇮🇳 India

city·Thiruvananthapuram

isp·Cable ISP in India

asn·AS17465

network·Standard

$ sikker risk 116.68.74.162scoring →

confidence

70%High

first_seen·Mar 6, 2026

last_seen·3h ago

sessions·8

events·8

$ sikker protocols 116.68.74.162

SMB

8 / 8

$ sikker summary 116.68.74.162

116.68.74.162 has a threat confidence score of 70%. This IP address from India (AS17465, Cable ISP in India) has been observed in 8 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 6, 2026, most recently active April 22, 2026.

$ sikker behaviors 116.68.74.162catalog →

highRemcom Remote Execution4x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 116.68.74.162

smb_empty_rpc_call4 smb_ipc_share_access4 smb_remcom_pipe_open4 smb_svcctl_pipe_open4

$ sikker related 116.68.74.162

🇮🇳·More threats fromIndia→AS·More threats fromCable ISP in India→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
202.88.244.34	98%	1,108
202.88.237.155	83%	12
111.92.8.16	51%	1
202.164.154.138	46%	7
202.88.241.169	69%	2,747

IP Address	Confidence	Events
103.160.197.169	28%	1
165.22.218.119	93%	12,040
183.82.43.211	94%	1,504
59.95.97.197	96%	3,306
103.107.60.45	99%	98