Check an IP Address, Domain Name, Subnet, or ASN

152.42.196.248 was found in our database!

$ whois 152.42.196.248

country·🇸🇬 Singapore

city·Singapore

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 152.42.196.248scoring →

confidence

84%Very High

first_seen·Apr 7, 2026

last_seen·52m ago

sessions·44

events·44

$ sikker protocols 152.42.196.248

RDP

44 / 44

$ sikker summary 152.42.196.248

152.42.196.248 has a threat confidence score of 84%. This IP address from Singapore (AS14061, DigitalOcean, LLC) has been observed in 44 honeypot sessions targeting RDP protocols. First observed on April 7, 2026, most recently active April 7, 2026.

$ sikker behaviors 152.42.196.248catalog →

mediumRdp Nla Ntlm Authentication Attempt7x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 152.42.196.248

rdp_nla_ntlm_auth7

$ sikker related 152.42.196.248

🇸🇬·More threats fromSingapore→AS·More threats fromDigitalOcean, LLC→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
165.245.186.179	78%	19
159.89.207.62	84%	60
178.128.61.145	83%	38
152.42.160.67	80%	40
159.65.10.15	77%	22

IP Address	Confidence	Events
134.122.189.28	97%	9,287
165.245.186.179	78%	19
159.89.207.62	84%	60
178.128.61.145	83%	38
152.42.160.67	80%	40