Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
61.152.89.39 has a threat confidence score of 76%. This IP address from China (AS4812, China Telecom Group) has been observed in 37 honeypot sessions targeting SMB, MSSQL protocols. Detected attack patterns include smb remcom stdout pipe access. First observed on March 11, 2026, most recently active March 21, 2026.
SMB session accessing a RemCom_stdout* named pipe following IPC$ share access, indicating interaction with a RemCom-style remote command execution channel.