Check an IP Address, Domain Name, Subnet, or ASN

165.22.103.24 was found in our database!

$ whois 165.22.103.24

country·🇸🇬 Singapore

city·Singapore

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 165.22.103.24scoring →

confidence

81%Very High

first_seen·Apr 7, 2026

last_seen·25m ago

sessions·44

events·44

$ sikker protocols 165.22.103.24

RDP

44 / 44

$ sikker summary 165.22.103.24

165.22.103.24 has a threat confidence score of 81%. This IP address from Singapore (AS14061, DigitalOcean, LLC) has been observed in 44 honeypot sessions targeting RDP protocols. First observed on April 7, 2026, most recently active April 8, 2026.

$ sikker behaviors 165.22.103.24catalog →

mediumRdp Nla Ntlm Authentication Attempt4x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 165.22.103.24

rdp_nla_ntlm_auth4

$ sikker related 165.22.103.24

🇸🇬·More threats fromSingapore→AS·More threats fromDigitalOcean, LLC→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
139.59.251.66	81%	36
165.22.252.124	82%	47
178.128.61.55	80%	37
178.128.103.194	83%	59
206.189.148.0	81%	50

IP Address	Confidence	Events
139.59.251.66	81%	36
47.130.108.237	63%	2,152
165.22.252.124	82%	47
178.128.61.55	80%	37
143.92.56.145	96%	4,424