Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
154.208.49.189 has a threat confidence score of 58%. This IP address from Pakistan (AS150750, IN CABLE INTERNET PRIVATE LIMITED) has been observed in 4 honeypot sessions targeting SMB, MSSQL protocols. First observed on March 1, 2026, most recently active March 1, 2026.
MSSQL session sequence performing automated server reconnaissance through multiple sp_server_info calls, case-sensitivity probing, charset and configuration enumeration from master.dbo tables, and session environment adjustments (set textsize, set arithabort on). The observed queries indicate scripted capability discovery and environment profiling based strictly on database command activity.