Check an IP Address, Domain Name, Subnet, or ASN

167.172.82.140 was found in our database!

$ whois 167.172.82.140

country·🇸🇬 Singapore

city·Singapore

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 167.172.82.140scoring →

confidence

83%Very High

first_seen·Apr 7, 2026

last_seen·8m ago

sessions·54

events·54

$ sikker protocols 167.172.82.140

RDP

54 / 54

$ sikker summary 167.172.82.140

167.172.82.140 has a threat confidence score of 83%. This IP address from Singapore (AS14061, DigitalOcean, LLC) has been observed in 54 honeypot sessions targeting RDP protocols. First observed on April 7, 2026, most recently active April 8, 2026.

$ sikker behaviors 167.172.82.140catalog →

mediumRdp Nla Ntlm Authentication Attempt5x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 167.172.82.140

rdp_nla_ntlm_auth5

$ sikker related 167.172.82.140

🇸🇬·More threats fromSingapore→AS·More threats fromDigitalOcean, LLC→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
165.22.218.119	94%	10,733
159.223.52.118	83%	50
157.230.246.119	82%	38
167.71.35.146	88%	190
206.189.44.10	82%	60

IP Address	Confidence	Events
43.134.1.142	96%	2,985
174.138.27.183	81%	31
43.134.92.91	96%	3,262
47.237.191.34	86%	49,588
159.223.62.50	85%	49