Check an IP Address, Domain Name, Subnet, or ASN

104.28.222.46 was found in our database!

$ whois 104.28.222.46

country·🇸🇬 Singapore

city·Singapore

isp·Cloudflare, Inc.

asn·AS13335

network·Standard

$ sikker risk 104.28.222.46scoring →

confidence

54%Medium

first_seen·Mar 20, 2026

last_seen·1h ago

sessions·2

events·2

$ sikker protocols 104.28.222.46

RDP

2 / 2

$ sikker summary 104.28.222.46

104.28.222.46 has a threat confidence score of 54%. This IP address from Singapore (AS13335, Cloudflare, Inc.) has been observed in 2 honeypot sessions targeting RDP protocols. First observed on March 20, 2026, most recently active March 20, 2026.

$ sikker behaviors 104.28.222.46catalog →

mediumRdp Nla Ntlm Authentication Attempt2x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 104.28.222.46

rdp_nla_ntlm_auth2

$ sikker related 104.28.222.46

🇸🇬·More threats fromSingapore→AS·More threats fromCloudflare, Inc.→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.69.7.207	6%	3
104.23.253.81	12%	3
172.70.47.147	6%	6
104.23.223.8	8%	15
172.68.174.116	9%	9

IP Address	Confidence	Events
165.154.203.254	97%	1,118
103.210.21.13	96%	1,538
43.156.13.43	96%	894
43.128.66.191	96%	811
143.92.56.145	95%	862