Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
172.206.32.90 has a threat confidence score of 69%. This IP address from United States (AS8075, Microsoft Corporation) has been observed in 4 honeypot sessions targeting SMB protocols. First observed on March 21, 2026, most recently active March 21, 2026.
Composite behavior identifying authenticated SMB interaction where a client accesses the IPC$ share, performs root directory reads, binds to the SAMR RPC interface, and interacts with the SRVSVC service pipe. This sequence is consistent with remote host and account enumeration activity over SMB, typically used to gather domain, user, and share information prior to lateral movement or privilege escalation attempts.