Check an IP Address, Domain Name, Subnet, or ASN

103.227.94.102 was found in our database!

$ whois 103.227.94.102

country·🇮🇳 India

isp·Skytech Broadband Private Limited

asn·AS151130

network·Standard

$ sikker risk 103.227.94.102scoring →

confidence

66%High

first_seen·Jan 24, 2026

last_seen·1h ago

sessions·68

events·68

$ sikker protocols 103.227.94.102

SMB

40 / 40

MSSQL

28 / 28

$ sikker summary 103.227.94.102

103.227.94.102 has a threat confidence score of 66%. This IP address from India (AS151130, Skytech Broadband Private Limited) has been observed in 68 honeypot sessions targeting SMB, MSSQL protocols. Detected attack patterns include remcom remote execution. First observed on January 24, 2026, most recently active March 22, 2026.

$ sikker behaviors 103.227.94.102catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.227.94.102

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 103.227.94.102

🇮🇳·More threats fromIndia→AS·More threats fromSkytech Broadband Private Limited→SMB·More threats targetingSMB→MSSQ·More threats targetingMSSQL→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.227.94.69	20%	38
103.227.94.130	20%	34

IP Address	Confidence	Events
165.22.218.119	79%	10,026
49.249.37.166	33%	139
172.71.198.88	14%	5
203.193.147.37	59%	874
52.66.69.41	96%	2,015