Check an IP Address, Domain Name, Subnet, or ASN

103.95.83.154 was found in our database!

$ whois 103.95.83.154

country·🇮🇳 India

city·New Delhi

isp·Excitel Broadband Private Limited

asn·AS133982

network·Standard

$ sikker risk 103.95.83.154scoring →

confidence

91%Very High

first_seen·Feb 18, 2026

last_seen·27d ago

sessions·25

events·25

$ sikker protocols 103.95.83.154

SMB

25 / 25

$ sikker summary 103.95.83.154

103.95.83.154 has a threat confidence score of 91%. This IP address from India (AS133982, Excitel Broadband Private Limited) has been observed in 25 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 18, 2026, most recently active February 21, 2026.

$ sikker behaviors 103.95.83.154catalog →

highRemcom Remote Execution10x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 103.95.83.154

smb_empty_rpc_call11 smb_ipc_share_access11 smb_remcom_pipe_open11 smb_svcctl_pipe_open11

$ sikker related 103.95.83.154

🇮🇳·More threats fromIndia→AS·More threats fromExcitel Broadband Private Limited→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
205.254.166.105	82%	5
103.95.83.44	78%	7
103.110.48.234	39%	4
205.254.184.98	42%	5
139.5.249.141	35%	3

IP Address	Confidence	Events
203.192.232.180	100%	281
5.231.93.221	97%	2,649
165.22.218.119	79%	9,883
52.66.69.41	95%	817
103.172.252.89	98%	359