Check an IP Address, Domain Name, Subnet, or ASN

103.89.234.14 was found in our database!

$ whois 103.89.234.14

country·🇮🇳 India

city·Mangaluru

isp·Deenet Services Pvt Ltd

asn·AS136308

network·Standard

$ sikker risk 103.89.234.14scoring →

confidence

65%High

first_seen·Feb 23, 2026

last_seen·Feb 23, 2026

sessions·4

events·4

$ sikker protocols 103.89.234.14

SMB

4 / 4

$ sikker summary 103.89.234.14

103.89.234.14 has a threat confidence score of 65%. This IP address from India (AS136308, Deenet Services Pvt Ltd) has been observed in 4 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 23, 2026, most recently active February 23, 2026.

$ sikker behaviors 103.89.234.14catalog →

highRemcom Remote Execution1x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.89.234.14

smb_empty_rpc_call1 smb_ipc_share_access1 smb_remcom_pipe_open1 smb_svcctl_pipe_open1

$ sikker related 103.89.234.14

🇮🇳·More threats fromIndia→AS·More threats fromDeenet Services Pvt Ltd→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.167.211.108	74%	6
103.167.211.46	90%	99
103.89.234.201	21%	18
103.89.234.105	44%	6
103.188.18.117	20%	25

IP Address	Confidence	Events
103.69.25.44	27%	1
40.81.230.77	58%	182
52.140.102.59	95%	2,043
125.19.183.114	37%	129
139.59.14.123	99%	469