Check an IP Address, Domain Name, Subnet, or ASN

103.116.38.109 was found in our database!

$ whois 103.116.38.109

country·🇻🇳 Vietnam

city·Huế

isp·Megacore Technology Company Limited

asn·AS140810

network·Standard

$ sikker risk 103.116.38.109scoring →

confidence

82%Very High

first_seen·Apr 4, 2026

last_seen·1d ago

sessions·12

events·12

$ sikker protocols 103.116.38.109

RDP

12 / 12

$ sikker summary 103.116.38.109

103.116.38.109 has a threat confidence score of 82%. This IP address from Vietnam (AS140810, Megacore Technology Company Limited) has been observed in 12 honeypot sessions targeting RDP protocols. First observed on April 4, 2026, most recently active April 4, 2026.

$ sikker behaviors 103.116.38.109catalog →

mediumRdp Nla Ntlm Authentication Attempt11x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 103.116.38.109

rdp_nla_ntlm_auth11

$ sikker related 103.116.38.109

🇻🇳·More threats fromVietnam→AS·More threats fromMegacore Technology Company Limited→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
103.116.38.114	96%	353
103.178.234.153	68%	11
103.77.215.165	88%	231
103.77.246.176	50%	39
103.77.214.247	94%	42

IP Address	Confidence	Events
160.191.55.81	96%	574
103.9.207.80	82%	10,449
14.244.219.0	44%	6
222.255.174.164	93%	331
117.5.146.64	39%	4