Check an IP Address, Domain Name, Subnet, or ASN
103.153.220.122 has a threat confidence score of 70%. This IP address from Vietnam (AS45557, Vietnam Technology and Telecommunication JSC) has been observed in 15 honeypot sessions targeting SMB protocols. First observed on March 5, 2026, most recently active March 25, 2026.
Composite behavior identifying SMB access to the IPC$ share followed by opening of the SVCCTL named pipe. This pattern indicates interaction with the Windows Service Control Manager over SMB and is commonly observed during remote service enumeration, service manipulation, or preparation for remote service-based execution.
Detects authenticated access to the IPC$ administrative share over SMB. This behavior indicates remote interaction with Windows inter-process communication mechanisms and is commonly observed during lateral movement, service enumeration, or preparation for remote command execution.