Check an IP Address, Domain Name, Subnet, or ASN

103.148.20.29 was found in our database!

$ whois 103.148.20.29

country·🇮🇳 India

city·Kochi

isp·Kerala Vision Broad Band Private Limited

asn·AS138754

network·Standard

$ sikker risk 103.148.20.29scoring →

confidence

67%High

first_seen·Mar 18, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 103.148.20.29

SMB

8 / 8

$ sikker summary 103.148.20.29

103.148.20.29 has a threat confidence score of 67%. This IP address from India (AS138754, Kerala Vision Broad Band Private Limited) has been observed in 8 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 18, 2026, most recently active March 23, 2026.

$ sikker behaviors 103.148.20.29catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.148.20.29

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 103.148.20.29

🇮🇳·More threats fromIndia→AS·More threats fromKerala Vision Broad Band Private Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.139.64.224	29%	95
103.178.205.183	39%	4
103.170.55.1	47%	33
103.149.158.187	35%	3
103.184.238.210	27%	4

IP Address	Confidence	Events
118.91.190.22	27%	76
106.51.92.114	100%	914
139.5.46.11	83%	194
172.236.169.244	65%	52
103.231.6.27	32%	100