Check an IP Address, Domain Name, Subnet, or ASN

103.95.83.114 was found in our database!

$ whois 103.95.83.114

country·🇮🇳 India

city·New Delhi

isp·Excitel Broadband Private Limited

asn·AS133982

network·Standard

$ sikker risk 103.95.83.114scoring →

confidence

94%Very High

first_seen·Feb 28, 2026

last_seen·14d ago

sessions·39

events·39

$ sikker protocols 103.95.83.114

SMB

39 / 39

$ sikker summary 103.95.83.114

103.95.83.114 has a threat confidence score of 94%. This IP address from India (AS133982, Excitel Broadband Private Limited) has been observed in 39 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 28, 2026, most recently active March 6, 2026.

$ sikker behaviors 103.95.83.114catalog →

highRemcom Remote Execution17x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.95.83.114

smb_empty_rpc_call17 smb_ipc_share_access17 smb_remcom_pipe_open17 smb_svcctl_pipe_open17

$ sikker related 103.95.83.114

🇮🇳·More threats fromIndia→AS·More threats fromExcitel Broadband Private Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
205.254.166.105	82%	5
103.95.83.44	78%	7
103.110.48.234	39%	4
205.254.184.98	42%	5
139.5.249.141	35%	3

IP Address	Confidence	Events
52.66.69.41	95%	825
103.40.61.98	100%	2,377
125.16.62.147	50%	72
117.236.124.166	48%	32
115.241.228.34	54%	501