Check an IP Address, Domain Name, Subnet, or ASN

49.231.235.148 was found in our database!

$ whois 49.231.235.148

country·🇹🇭 Thailand

city·Chon Buri

isp·SBN-ISPAWN-ISP and SBN-NIXAWN-NIX

asn·AS45458

network·Standard

$ sikker risk 49.231.235.148scoring →

confidence

85%Very High

first_seen·Feb 5, 2026

last_seen·14d ago

sessions·21

events·33

$ sikker protocols 49.231.235.148

SMB

21 / 33

$ sikker summary 49.231.235.148

49.231.235.148 has a threat confidence score of 85%. This IP address from Thailand (AS45458, SBN-ISPAWN-ISP and SBN-NIXAWN-NIX) has been observed in 21 honeypot sessions targeting SMB protocols. Detected attack patterns include remcom remote execution. First observed on February 5, 2026, most recently active March 6, 2026.

$ sikker behaviors 49.231.235.148catalog →

highRemcom Remote Execution9x

Sequential SMB session opening IPC$, accessing the svcctl pipe, issuing an RPC call, then opening the RemCom_communicaton pipe. Indicates remote service-based command execution.

$ sikker primitives 49.231.235.148

smb_empty_rpc_call9 smb_ipc_share_access9 smb_remcom_pipe_open9 smb_svcctl_pipe_open9 smb_c_share_access2

$ sikker related 49.231.235.148

🇹🇭·More threats fromThailand→AS·More threats fromSBN-ISPAWN-ISP and SBN-NIXAWN-NIX→SMB·More threats targetingSMB→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
49.231.192.36	100%	509
49.231.225.114	22%	52
49.231.247.62	33%	151
58.137.201.36	35%	3
147.50.103.212	100%	724

IP Address	Confidence	Events
150.109.167.154	97%	1,325
43.173.247.235	96%	1,237
150.109.186.71	96%	1,468
43.173.249.23	96%	1,291
43.173.246.72	96%	1,329