Check an IP Address, Domain Name, Subnet, or ASN

38.172.56.24 was found in our database!

$ whois 38.172.56.24

country·🇻🇪 Venezuela

city·Barcelona

isp·GRUPO TECNOLIFE, C.A.

asn·AS272955

network·Standard

$ sikker risk 38.172.56.24scoring →

confidence

74%High

first_seen·Feb 24, 2026

last_seen·1h ago

sessions·11

events·11

$ sikker protocols 38.172.56.24

SMB

11 / 11

$ sikker summary 38.172.56.24

38.172.56.24 has a threat confidence score of 74%. This IP address from Venezuela (AS272955, GRUPO TECNOLIFE, C.A.) has been observed in 11 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 24, 2026, most recently active April 6, 2026.

$ sikker behaviors 38.172.56.24catalog →

highRemcom Remote Execution5x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 38.172.56.24

smb_empty_rpc_call5 smb_ipc_share_access5 smb_remcom_pipe_open5 smb_svcctl_pipe_open5

$ sikker related 38.172.56.24

🇻🇪·More threats fromVenezuela→AS·More threats fromGRUPO TECNOLIFE, C.A.→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
38.172.56.69	54%	8
38.172.56.25	49%	9
38.172.56.85	17%	18
38.172.56.83	39%	4
38.172.56.84	18%	27

IP Address	Confidence	Events
201.209.109.217	32%	32
190.202.7.78	41%	361
186.94.115.222	86%	11
190.73.25.191	35%	40
45.168.174.69	39%	4