Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
112.133.203.205 has a threat confidence score of 55%. This IP address from India (AS24186, RailTel Corporation of India Ltd) has been observed in 32 honeypot sessions targeting SMB protocols. First observed on February 18, 2026, most recently active April 24, 2026.
Composite behavior identifying SMB access to the IPC$ share followed by opening of the SVCCTL named pipe. This pattern indicates interaction with the Windows Service Control Manager over SMB and is commonly observed during remote service enumeration, service manipulation, or preparation for remote service-based execution.