Check an IP Address, Domain Name, Subnet, or ASN

189.231.160.65 was found in our database!

$ whois 189.231.160.65

country·🇲🇽 Mexico

city·Chihuahua City

isp·UNINET

asn·AS8151

network·Standard

$ sikker risk 189.231.160.65scoring →

confidence

76%High

first_seen·Mar 6, 2026

last_seen·1h ago

sessions·14

events·14

$ sikker protocols 189.231.160.65

SMB

14 / 14

$ sikker summary 189.231.160.65

189.231.160.65 has a threat confidence score of 76%. This IP address from Mexico (AS8151, UNINET) has been observed in 14 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 6, 2026, most recently active March 29, 2026.

$ sikker behaviors 189.231.160.65catalog →

highRemcom Remote Execution5x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 189.231.160.65

smb_empty_rpc_call5 smb_ipc_share_access5 smb_remcom_pipe_open5 smb_svcctl_pipe_open5

$ sikker related 189.231.160.65

🇲🇽·More threats fromMexico→AS·More threats fromUNINET→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
189.147.20.241	82%	6
189.167.36.178	51%	1
187.234.11.240	35%	3
189.243.228.106	47%	94
189.176.166.78	24%	9

IP Address	Confidence	Events
189.167.36.178	51%	1
187.234.11.240	35%	3
189.243.228.106	47%	94
189.176.166.78	24%	9
45.134.9.27	100%	190