Check an IP Address, Domain Name, Subnet, or ASN

103.158.127.113 was found in our database!

$ whois 103.158.127.113

country·🇮🇩 Indonesia

city·Bekasi

isp·PT Maxindo Mitra Solusi

asn·AS38320

network·Standard

$ sikker risk 103.158.127.113scoring →

confidence

82%Very High

first_seen·Apr 5, 2026

last_seen·1d ago

sessions·8

events·8

$ sikker protocols 103.158.127.113

SMB

8 / 8

$ sikker summary 103.158.127.113

103.158.127.113 has a threat confidence score of 82%. This IP address from Indonesia (AS38320, PT Maxindo Mitra Solusi) has been observed in 8 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on April 5, 2026, most recently active April 5, 2026.

$ sikker behaviors 103.158.127.113catalog →

highRemcom Remote Execution4x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.158.127.113

smb_empty_rpc_call4 smb_ipc_share_access4 smb_remcom_pipe_open4 smb_svcctl_pipe_open4

$ sikker related 103.158.127.113

🇮🇩·More threats fromIndonesia→AS·More threats fromPT Maxindo Mitra Solusi→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
175.103.57.65	38%	8
139.5.154.178	11%	7
175.103.37.162	39%	4
103.234.254.149	23%	1
43.247.39.129	23%	1

IP Address	Confidence	Events
103.160.212.109	94%	35
43.157.203.128	96%	2,917
114.30.81.140	95%	312
180.248.42.252	97%	763
43.133.138.59	96%	3,013