Check an IP Address, Domain Name, Subnet, or ASN

167.172.80.134 was found in our database!

$ whois 167.172.80.134

country·🇸🇬 Singapore

city·Singapore

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 167.172.80.134scoring →

confidence

76%High

first_seen·Apr 7, 2026

last_seen·49m ago

sessions·14

events·14

$ sikker protocols 167.172.80.134

RDP

14 / 14

$ sikker summary 167.172.80.134

167.172.80.134 has a threat confidence score of 76%. This IP address from Singapore (AS14061, DigitalOcean, LLC) has been observed in 14 honeypot sessions targeting RDP protocols. First observed on April 7, 2026, most recently active April 7, 2026.

$ sikker behaviors 167.172.80.134catalog →

mediumRdp Nla Ntlm Authentication Attempt5x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 167.172.80.134

rdp_nla_ntlm_auth5

$ sikker related 167.172.80.134

🇸🇬·More threats fromSingapore→AS·More threats fromDigitalOcean, LLC→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
152.42.255.54	76%	19
159.223.40.43	79%	23
64.225.106.54	53%	11
159.223.43.72	72%	539
159.223.49.57	83%	44

IP Address	Confidence	Events
167.99.78.5	77%	20
152.42.252.212	78%	19
43.134.1.173	95%	1,296
159.223.43.72	72%	547
159.223.87.111	81%	29