Check an IP Address, Domain Name, Subnet, or ASN

103.16.71.138 was found in our database!

$ whois 103.16.71.138

country·🇮🇳 India

city·Bengaluru

isp·Gatik Business Solutions

asn·AS132559

network·Standard

$ sikker risk 103.16.71.138scoring →

confidence

98%Very High

first_seen·Jan 21, 2026

last_seen·1h ago

sessions·217

events·523

$ sikker protocols 103.16.71.138

SMB

217 / 523

$ sikker summary 103.16.71.138

103.16.71.138 has a threat confidence score of 98%. This IP address from India (AS132559, Gatik Business Solutions) has been observed in 217 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on January 21, 2026, most recently active March 21, 2026.

$ sikker behaviors 103.16.71.138catalog →

highRemcom Remote Execution94x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.16.71.138

smb_empty_rpc_call94 smb_ipc_share_access94 smb_remcom_pipe_open94 smb_svcctl_pipe_open94 smb_c_share_access51

$ sikker related 103.16.71.138

🇮🇳·More threats fromIndia→AS·More threats fromGatik Business Solutions→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
36.255.85.126	33%	121
160.22.87.8	30%	103
103.180.45.11	25%	61
36.255.86.152	78%	11
160.22.87.13	23%	49

IP Address	Confidence	Events
52.66.69.41	96%	1,368
117.221.160.104	75%	3
160.25.28.205	95%	473
103.69.88.110	51%	7
103.156.204.2	100%	224