Check an IP Address, Domain Name, Subnet, or ASN

38.93.203.172 was found in our database!

$ whois 38.93.203.172

country·🇺🇸 United States

city·San Jose

isp·FiberPower LLC

asn·AS214483

network·Standard

$ sikker risk 38.93.203.172scoring →

confidence

75%High

first_seen·Mar 6, 2026

last_seen·20d ago

sessions·9

events·9

$ sikker protocols 38.93.203.172

SMB

9 / 9

$ sikker summary 38.93.203.172

38.93.203.172 has a threat confidence score of 75%. This IP address from United States (AS214483, FiberPower LLC) has been observed in 9 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 6, 2026, most recently active March 9, 2026.

$ sikker behaviors 38.93.203.172catalog →

highRemcom Remote Execution3x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 38.93.203.172

smb_empty_rpc_call3 smb_ipc_share_access3 smb_remcom_pipe_open3 smb_svcctl_pipe_open3

$ sikker related 38.93.203.172

🇺🇸·More threats fromUnited States→AS·More threats fromFiberPower LLC→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
38.179.82.137	82%	6
23.136.188.187	82%	6
38.248.248.39	91%	16

IP Address	Confidence	Events
20.29.21.208	67%	156
162.254.3.130	86%	26,346
45.61.184.223	99%	31,218
192.210.186.10	100%	3,284
172.206.225.82	59%	105