Check an IP Address, Domain Name, Subnet, or ASN

146.56.199.20 was found in our database!

$ whois 146.56.199.20

country·🇨🇳 China

city·Nanjing

isp·Shenzhen Tencent Computer Systems Company Limited

asn·AS45090

network·Standard

$ sikker risk 146.56.199.20scoring →

confidence

85%Very High

first_seen·Mar 16, 2026

last_seen·1h ago

sessions·32

events·32

$ sikker protocols 146.56.199.20

RDP

32 / 32

$ sikker summary 146.56.199.20

146.56.199.20 has a threat confidence score of 85%. This IP address from China (AS45090, Shenzhen Tencent Computer Systems Company Limited) has been observed in 32 honeypot sessions targeting RDP protocols. First observed on March 16, 2026, most recently active March 26, 2026.

$ sikker behaviors 146.56.199.20catalog →

mediumRdp Nla Ntlm Authentication Attempt25x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 146.56.199.20

rdp_nla_ntlm_auth25

$ sikker related 146.56.199.20

🇨🇳·More threats fromChina→AS·More threats fromShenzhen Tencent Computer Systems Company Limited→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
81.69.97.55	24%	21
111.229.151.220	86%	21
122.51.217.251	82%	11
111.229.106.158	35%	3
121.5.206.104	26%	11

IP Address	Confidence	Events
139.224.112.216	83%	13,701
116.53.130.4	51%	428
121.227.153.106	59%	892
112.46.212.94	96%	172
103.100.69.141	100%	517