Check an IP Address, Domain Name, Subnet, or ASN

103.47.180.106 was found in our database!

$ whois 103.47.180.106

country·🇵🇰 Pakistan

city·Faisalabad

isp·Login.Me Pvt Ltd

asn·AS131471

network·Standard

$ sikker risk 103.47.180.106scoring →

confidence

90%Very High

first_seen·Mar 2, 2026

last_seen·6d ago

sessions·33

events·33

$ sikker protocols 103.47.180.106

SMB

33 / 33

$ sikker summary 103.47.180.106

103.47.180.106 has a threat confidence score of 90%. This IP address from Pakistan (AS131471, Login.Me Pvt Ltd) has been observed in 33 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 2, 2026, most recently active April 24, 2026.

$ sikker behaviors 103.47.180.106catalog →

highRemcom Remote Execution15x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.47.180.106

smb_empty_rpc_call15 smb_ipc_share_access15 smb_remcom_pipe_open15 smb_svcctl_pipe_open15

$ sikker related 103.47.180.106

🇵🇰·More threats fromPakistan→AS·More threats fromLogin.Me Pvt Ltd→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.150.154.246	37%	2
103.47.180.74	68%	11
103.150.154.239	64%	2
119.30.85.249	54%	14

IP Address	Confidence	Events
182.184.29.90	94%	1,141
103.18.14.0	100%	55
110.39.181.194	47%	455
39.43.252.218	58%	10
72.255.26.227	100%	227