Check an IP Address, Domain Name, Subnet, or ASN

190.111.3.138 was found in our database!

$ whois 190.111.3.138

country·🇬🇹 Guatemala

city·Guatemala City

isp·Navega.com S.A.

asn·AS26617

network·Standard

$ sikker risk 190.111.3.138scoring →

confidence

72%High

first_seen·May 4, 2026

last_seen·18h ago

sessions·4

events·4

$ sikker protocols 190.111.3.138

SMB

4 / 4

$ sikker summary 190.111.3.138

190.111.3.138 has a threat confidence score of 72%. This IP address from Guatemala (AS26617, Navega.com S.A.) has been observed in 4 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on May 4, 2026, most recently active May 4, 2026.

$ sikker behaviors 190.111.3.138catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 190.111.3.138

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 190.111.3.138

🇬🇹·More threats fromGuatemala→AS·More threats fromNavega.com S.A.→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
200.12.40.206	32%	125
190.120.9.82	28%	145
138.219.159.163	15%	36
190.120.9.88	30%	174
200.35.189.2	19%	61

IP Address	Confidence	Events
162.158.11.157	12%	5
162.158.82.168	12%	5
172.68.137.140	4%	30
162.158.11.152	4%	14
172.68.137.136	5%	10