Check an IP Address, Domain Name, Subnet, or ASN

112.111.24.51 was found in our database!

$ whois 112.111.24.51

country·🇨🇳 China

city·Fuzhou

isp·CHINA UNICOM China169 Backbone

asn·AS4837

network·Standard

$ sikker risk 112.111.24.51scoring →

confidence

43%Medium

first_seen·Apr 1, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 112.111.24.51

RDP

1 / 1

$ sikker summary 112.111.24.51

112.111.24.51 has a threat confidence score of 43%. This IP address from China (AS4837, CHINA UNICOM China169 Backbone) has been observed in 1 honeypot sessions targeting RDP protocols. First observed on April 1, 2026, most recently active April 1, 2026.

$ sikker behaviors 112.111.24.51catalog →

mediumRdp Nla Ntlm Authentication Attempt1x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 112.111.24.51

rdp_nla_ntlm_auth1

$ sikker related 112.111.24.51

🇨🇳·More threats fromChina→AS·More threats fromCHINA UNICOM China169 Backbone→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
221.199.172.66	49%	399
175.42.32.205	96%	4,865
39.74.93.39	92%	2
116.176.55.42	53%	18
123.188.239.222	96%	3,435

IP Address	Confidence	Events
117.132.188.205	42%	65
115.190.56.163	94%	357
116.62.7.162	78%	15,332
36.26.57.202	26%	93
1.94.147.47	54%	2