Check an IP Address, Domain Name, Subnet, or ASN

103.89.234.15 was found in our database!

$ whois 103.89.234.15

country·🇮🇳 India

city·Mangaluru

isp·Deenet Services Pvt Ltd

asn·AS136308

network·Standard

$ sikker risk 103.89.234.15scoring →

confidence

76%High

first_seen·Feb 23, 2026

last_seen·Feb 23, 2026

sessions·4

events·4

$ sikker protocols 103.89.234.15

SMB

4 / 4

$ sikker summary 103.89.234.15

103.89.234.15 has a threat confidence score of 76%. This IP address from India (AS136308, Deenet Services Pvt Ltd) has been observed in 4 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 23, 2026, most recently active February 23, 2026.

$ sikker behaviors 103.89.234.15catalog →

highRemcom Remote Execution3x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.89.234.15

smb_empty_rpc_call3 smb_ipc_share_access3 smb_remcom_pipe_open3 smb_svcctl_pipe_open3

$ sikker related 103.89.234.15

🇮🇳·More threats fromIndia→AS·More threats fromDeenet Services Pvt Ltd→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.167.211.108	74%	6
103.167.211.46	90%	99
103.89.234.201	21%	18
103.89.234.105	44%	6
103.188.18.117	20%	25

IP Address	Confidence	Events
103.49.131.118	93%	104
103.110.164.234	15%	14
106.51.23.167	64%	168
103.243.55.80	21%	51
139.59.14.123	99%	454