Check an IP Address, Domain Name, Subnet, or ASN

175.100.52.48 was found in our database!

$ whois 175.100.52.48

country·🇰🇭 Cambodia

city·Phnom Penh

isp·ISPIXP IN CAMBODIA WITH THE BEST VERVICE IN THERE.

asn·AS38623

network·Standard

$ sikker risk 175.100.52.48scoring →

confidence

72%High

first_seen·Mar 12, 2026

last_seen·Mar 12, 2026

sessions·4

events·4

$ sikker protocols 175.100.52.48

SMB

4 / 4

$ sikker summary 175.100.52.48

175.100.52.48 has a threat confidence score of 72%. This IP address from Cambodia (AS38623, ISPIXP IN CAMBODIA WITH THE BEST VERVICE IN THERE.) has been observed in 4 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 12, 2026, most recently active March 12, 2026.

$ sikker behaviors 175.100.52.48catalog →

highRemcom Remote Execution2x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 175.100.52.48

smb_empty_rpc_call2 smb_ipc_share_access2 smb_remcom_pipe_open2 smb_svcctl_pipe_open2

$ sikker related 175.100.52.48

🇰🇭·More threats fromCambodia→AS·More threats fromISPIXP IN CAMBODIA WITH THE BEST VERVICE IN THERE.→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
175.100.107.238	49%	471
175.100.24.139	100%	1,084
36.37.176.80	11%	2
175.100.40.168	17%	35
220.158.234.48	55%	46

IP Address	Confidence	Events
175.100.107.238	49%	471
175.100.24.139	100%	1,084
103.101.83.5	95%	234
202.56.1.78	38%	309
103.242.56.101	73%	125