Check an IP Address, Domain Name, Subnet, or ASN

111.255.111.42 was found in our database!

$ whois 111.255.111.42

country·🇹🇼 Taiwan

city·Tainan

isp·Data Communication Business Group

asn·AS3462

network·Standard

$ sikker risk 111.255.111.42scoring →

confidence

82%Very High

first_seen·Apr 1, 2026

last_seen·1h ago

sessions·8

events·8

$ sikker protocols 111.255.111.42

SMB

8 / 8

$ sikker summary 111.255.111.42

111.255.111.42 has a threat confidence score of 82%. This IP address from Taiwan (AS3462, Data Communication Business Group) has been observed in 8 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on April 1, 2026, most recently active April 1, 2026.

$ sikker behaviors 111.255.111.42catalog →

highRemcom Remote Execution4x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 111.255.111.42

smb_empty_rpc_call4 smb_ipc_share_access4 smb_remcom_pipe_open4 smb_svcctl_pipe_open4

$ sikker related 111.255.111.42

🇹🇼·More threats fromTaiwan→AS·More threats fromData Communication Business Group→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
210.61.148.174	58%	877
111.243.138.95	39%	4
118.169.68.127	35%	3
61.228.221.55	39%	4
59.127.74.235	18%	42

IP Address	Confidence	Events
106.1.10.110	27%	60
210.61.148.174	58%	877
34.81.72.185	100%	903
213.209.159.66	84%	7,740
213.209.159.159	95%	66,892