Check an IP Address, Domain Name, Subnet, or ASN

152.32.215.30 was found in our database!

$ whois 152.32.215.30

country·🇭🇰 Hong Kong

city·Hong Kong

isp·UCLOUD INFORMATION TECHNOLOGY HK LIMITED

asn·AS135377

network·Standard

$ sikker risk 152.32.215.30scoring →

confidence

54%Medium

first_seen·Mar 24, 2026

last_seen·34m ago

sessions·2

events·2

$ sikker protocols 152.32.215.30

RDP

2 / 2

$ sikker summary 152.32.215.30

152.32.215.30 has a threat confidence score of 54%. This IP address from Hong Kong (AS135377, UCLOUD INFORMATION TECHNOLOGY HK LIMITED) has been observed in 2 honeypot sessions targeting RDP protocols. First observed on March 24, 2026, most recently active March 24, 2026.

$ sikker behaviors 152.32.215.30catalog →

mediumRdp Nla Ntlm Authentication Attempt2x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 152.32.215.30

rdp_nla_ntlm_auth2

$ sikker related 152.32.215.30

🇭🇰·More threats fromHong Kong→AS·More threats fromUCLOUD INFORMATION TECHNOLOGY HK LIMITED→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
152.32.174.119	88%	12
152.32.191.75	100%	901
152.32.168.34	75%	238
123.58.212.9	97%	3,724
45.43.63.34	96%	1,560

IP Address	Confidence	Events
172.110.223.64	98%	15,520
103.143.238.222	97%	2,662
152.32.174.119	88%	12
156.224.28.47	95%	82
43.225.157.79	97%	753