Check an IP Address, Domain Name, Subnet, or ASN

42.61.168.236 was found in our database!

$ whois 42.61.168.236

country·🇸🇬 Singapore

city·Singapore

isp·Singtel Fibre Broadband

asn·AS9506

network·Standard

$ sikker risk 42.61.168.236scoring →

confidence

79%High

first_seen·Mar 4, 2026

last_seen·Mar 4, 2026

sessions·7

events·7

$ sikker protocols 42.61.168.236

SMB

7 / 7

$ sikker summary 42.61.168.236

42.61.168.236 has a threat confidence score of 79%. This IP address from Singapore (AS9506, Singtel Fibre Broadband) has been observed in 7 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on March 4, 2026, most recently active March 4, 2026.

$ sikker behaviors 42.61.168.236catalog →

highRemcom Remote Execution3x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 42.61.168.236

smb_empty_rpc_call3 smb_ipc_share_access3 smb_remcom_pipe_open3 smb_svcctl_pipe_open3

$ sikker related 42.61.168.236

🇸🇬·More threats fromSingapore→AS·More threats fromSingtel Fibre Broadband→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
121.7.204.82	19%	6
118.201.254.83	37%	1
128.106.221.38	21%	52
119.234.191.17	30%	2
128.106.218.242	37%	1

IP Address	Confidence	Events
43.134.82.46	95%	3,936
8.222.128.242	97%	861
51.79.142.7	95%	2,072
54.151.176.0	85%	9,640
43.160.245.106	100%	1,147