Check an IP Address, Domain Name, Subnet, or ASN

203.160.86.247 was found in our database!

$ whois 203.160.86.247

country·🇭🇰 Hong Kong

isp·China Unicom Global

asn·AS10099

network·Standard

$ sikker risk 203.160.86.247scoring →

confidence

63%High

first_seen·Mar 26, 2026

last_seen·1d ago

sessions·3

events·3

$ sikker protocols 203.160.86.247

SMB

3 / 3

$ sikker summary 203.160.86.247

203.160.86.247 has a threat confidence score of 63%. This IP address from Hong Kong (AS10099, China Unicom Global) has been observed in 3 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 26, 2026, most recently active March 26, 2026.

$ sikker behaviors 203.160.86.247catalog →

highRemcom Remote Execution1x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 203.160.86.247

smb_empty_rpc_call1 smb_ipc_share_access1 smb_remcom_pipe_open1 smb_svcctl_pipe_open1

$ sikker related 203.160.86.247

🇭🇰·More threats fromHong Kong→AS·More threats fromChina Unicom Global→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.1.64.34	96%	30
118.26.153.102	51%	438
118.26.153.84	52%	458
162.219.39.218	13%	15
203.160.86.63	61%	3

IP Address	Confidence	Events
172.110.223.44	98%	40,543
47.243.137.152	80%	14
103.143.231.2	59%	10
47.238.76.68	88%	11,570
154.209.4.37	94%	586