Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
117.98.12.10 has a threat confidence score of 75%. This IP address from India (AS45609, Bharti Airtel Ltd. AS for GPRS Service) has been observed in 2 honeypot sessions targeting SMB protocols. Detected attack patterns include smb remcom remote command execution. First observed on March 27, 2026, most recently active March 27, 2026.
Identifies PsExec/RemCom-style remote command execution over SMB, involving IPC$ share access, service control manager pipe interaction (svcctl), and communication via the RemCom named pipe. This behavior reflects authenticated lateral movement and remote process execution through Windows administrative shares.