Check an IP Address, Domain Name, Subnet, or ASN

103.209.222.227 was found in our database!

$ whois 103.209.222.227

country·🇮🇳 India

isp·Kerala Vision Broad Band Private Limited

asn·AS138754

network·Standard

$ sikker risk 103.209.222.227scoring →

confidence

74%High

first_seen·Apr 24, 2026

last_seen·1h ago

sessions·6

events·6

$ sikker protocols 103.209.222.227

SMB

6 / 6

$ sikker summary 103.209.222.227

103.209.222.227 has a threat confidence score of 74%. This IP address from India (AS138754, Kerala Vision Broad Band Private Limited) has been observed in 6 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on April 24, 2026, most recently active April 24, 2026.

$ sikker behaviors 103.209.222.227catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.209.222.227

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 103.209.222.227

🇮🇳·More threats fromIndia→AS·More threats fromKerala Vision Broad Band Private Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.190.195.209	32%	79
103.118.150.139	31%	64
103.170.54.48	35%	3
103.184.238.237	35%	3
103.148.20.88	39%	4

IP Address	Confidence	Events
14.1.119.12	39%	371
59.95.97.197	96%	3,658
103.147.248.23	50%	528
14.99.61.248	46%	392
61.12.86.90	49%	502