Check an IP Address, Domain Name, Subnet, or ASN

144.172.96.178 was found in our database!

$ whois 144.172.96.178

country·🇺🇸 United States

city·Ogden

isp·RouterHosting LLC

asn·AS14956

network·Standard

$ sikker risk 144.172.96.178scoring →

confidence

92%Very High

first_seen·May 6, 2026

last_seen·2m ago

sessions·29

events·29

$ sikker protocols 144.172.96.178

RDP

29 / 29

$ sikker summary 144.172.96.178

144.172.96.178 has a threat confidence score of 92%. This IP address from United States (AS14956, RouterHosting LLC) has been observed in 29 honeypot sessions targeting RDP protocols. First observed on May 6, 2026, most recently active May 6, 2026.

$ sikker behaviors 144.172.96.178catalog →

mediumRdp Nla Ntlm Authentication Attempt29x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 144.172.96.178

rdp_nla_ntlm_auth29

$ sikker related 144.172.96.178

🇺🇸·More threats fromUnited States→AS·More threats fromRouterHosting LLC→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.61.132.64	94%	38
107.189.19.55	51%	9
45.61.133.121	24%	131
107.189.19.172	32%	274
107.189.27.59	33%	289

IP Address	Confidence	Events
159.203.128.213	62%	8
154.16.112.232	100%	356,715
144.126.150.125	74%	145
157.254.223.75	95%	4,890
154.127.53.103	96%	4,678