Check an IP Address, Domain Name, Subnet, or ASN

191.6.250.11 was found in our database!

$ whois 191.6.250.11

country·🇧🇷 Brazil

city·Palmares

isp·TORPEDOLINK TELECOM

asn·AS263302

network·Standard

$ sikker risk 191.6.250.11scoring →

confidence

71%High

first_seen·Feb 24, 2026

last_seen·17d ago

sessions·9

events·9

$ sikker protocols 191.6.250.11

SMB

9 / 9

$ sikker summary 191.6.250.11

191.6.250.11 has a threat confidence score of 71%. This IP address from Brazil (AS263302, TORPEDOLINK TELECOM) has been observed in 9 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 24, 2026, most recently active March 3, 2026.

$ sikker behaviors 191.6.250.11catalog →

highRemcom Remote Execution3x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 191.6.250.11

smb_empty_rpc_call3 smb_ipc_share_access3 smb_remcom_pipe_open3 smb_svcctl_pipe_open3

$ sikker related 191.6.250.11

🇧🇷·More threats fromBrazil→AS·More threats fromTORPEDOLINK TELECOM→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
191.6.250.1	22%	57
191.6.250.2	25%	74
191.6.250.66	16%	16
191.6.250.16	49%	9

IP Address	Confidence	Events
181.191.128.18	100%	320
189.90.36.203	92%	19
187.16.96.250	100%	3,661
177.124.57.66	33%	92
149.78.98.46	39%	4