Check an IP Address, Domain Name, Subnet, or ASN

112.53.82.213 was found in our database!

$ whois 112.53.82.213

country·🇨🇳 China

isp·Shandong Mobile Communication Company Limited

asn·AS24444

network·Standard

$ sikker risk 112.53.82.213scoring →

confidence

57%Medium

first_seen·Apr 9, 2026

last_seen·18h ago

sessions·4

events·4

$ sikker protocols 112.53.82.213

RDP

4 / 4

$ sikker summary 112.53.82.213

112.53.82.213 has a threat confidence score of 57%. This IP address from China (AS24444, Shandong Mobile Communication Company Limited) has been observed in 4 honeypot sessions targeting RDP protocols. First observed on April 9, 2026, most recently active April 13, 2026.

$ sikker behaviors 112.53.82.213catalog →

mediumRdp Nla Ntlm Authentication Attempt4x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 112.53.82.213

rdp_nla_ntlm_auth4

$ sikker related 112.53.82.213

🇨🇳·More threats fromChina→AS·More threats fromShandong Mobile Communication Company Limited→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
111.17.213.162	47%	395
111.35.7.46	91%	622
112.6.227.209	100%	503
223.99.212.58	49%	457
111.36.57.69	80%	130

IP Address	Confidence	Events
112.46.213.248	96%	379
123.54.215.78	96%	4,809
139.9.105.168	95%	111
117.72.40.174	96%	496
14.103.198.81	100%	846