Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
42.119.4.87 has a threat confidence score of 77%. This IP address from Vietnam (AS18403, FPT Telecom Company) has been observed in 6 honeypot sessions targeting SMB, MSSQL protocols. Detected attack patterns include smb remcom remote command execution. First observed on March 30, 2026, most recently active March 30, 2026.
Identifies PsExec/RemCom-style remote command execution over SMB, involving IPC$ share access, service control manager pipe interaction (svcctl), and communication via the RemCom named pipe. This behavior reflects authenticated lateral movement and remote process execution through Windows administrative shares.