Check an IP Address, Domain Name, Subnet, or ASN

103.155.222.128 was found in our database!

$ whois 103.155.222.128

country·🇮🇳 India

city·Thiruvananthapuram

isp·Kerala Vision Broad Band Private Limited

asn·AS138754

network·Standard

$ sikker risk 103.155.222.128scoring →

confidence

76%High

first_seen·Mar 27, 2026

last_seen·2h ago

sessions·11

events·11

$ sikker protocols 103.155.222.128

SMB

11 / 11

$ sikker summary 103.155.222.128

103.155.222.128 has a threat confidence score of 76%. This IP address from India (AS138754, Kerala Vision Broad Band Private Limited) has been observed in 11 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 27, 2026, most recently active March 28, 2026.

$ sikker behaviors 103.155.222.128catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.155.222.128

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 103.155.222.128

🇮🇳·More threats fromIndia→AS·More threats fromKerala Vision Broad Band Private Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.149.158.52	44%	6
103.177.253.234	35%	3
103.149.158.181	44%	6
103.170.54.96	39%	4
103.183.82.218	63%	3

IP Address	Confidence	Events
104.22.6.136	10%	21
103.190.92.110	72%	222
59.183.115.56	74%	3
122.176.101.217	21%	47
103.174.10.21	95%	1,693