Check an IP Address, Domain Name, Subnet, or ASN

103.191.118.56 was found in our database!

$ whois 103.191.118.56

country·🇵🇰 Pakistan

isp·Telenor Pakistan

asn·AS24499

network·Standard

$ sikker risk 103.191.118.56scoring →

confidence

60%High

first_seen·Feb 18, 2026

last_seen·Feb 18, 2026

sessions·11

events·11

$ sikker protocols 103.191.118.56

HTTPS

8 / 8

FTP

1 / 1

SSH

1 / 1

MYSQL

1 / 1

$ sikker summary 103.191.118.56

103.191.118.56 has a threat confidence score of 60%. This IP address from Pakistan (AS24499, Telenor Pakistan) has been observed in 11 honeypot sessions targeting HTTPS, FTP, SSH, MYSQL protocols. First observed on February 18, 2026, most recently active February 18, 2026.

$ sikker behaviors 103.191.118.56catalog →

infoHttps Root Path Request1x

Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration

$ sikker primitives 103.191.118.56

ftp_user_probe1 https_path_root1 ftp_nlst_request1 ftp_set_binary_mode1 ftp_password_attempt1 ftp_enter_passive_mode1 ftp_print_working_directory1

$ sikker related 103.191.118.56

🇵🇰·More threats fromPakistan→AS·More threats fromTelenor Pakistan→HTTP·More threats targetingHTTPS→FTP·More threats targetingFTP→SSH·More threats targetingSSH→MYSQ·More threats targetingMYSQL→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
37.111.181.54	60%	24
37.111.167.227	60%	24
37.111.139.71	58%	20
103.57.224.130	58%	1
103.57.224.59	23%	1

IP Address	Confidence	Events
103.152.255.191	85%	14
43.228.157.57	89%	1,805
66.167.166.158	100%	1,404
223.123.65.5	100%	470
39.62.107.22	58%	1