Check an IP Address, Domain Name, Subnet, or ASN

179.131.174.27 was found in our database!

$ whois 179.131.174.27

country·🇧🇷 Brazil

city·Goiânia

isp·TELEFONICA BRASIL S.A

asn·AS26599

network·Standard

$ sikker risk 179.131.174.27scoring →

confidence

96%Very High

first_seen·Apr 13, 2026

last_seen·17d ago

sessions·131

events·131

$ sikker protocols 179.131.174.27

RDP

131 / 131

$ sikker summary 179.131.174.27

179.131.174.27 has a threat confidence score of 96%. This IP address from Brazil (AS26599, TELEFONICA BRASIL S.A) has been observed in 131 honeypot sessions targeting RDP protocols. First observed on April 13, 2026, most recently active April 14, 2026.

$ sikker behaviors 179.131.174.27catalog →

mediumRdp Nla Ntlm Authentication Attempt131x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 179.131.174.27

rdp_nla_ntlm_auth131

$ sikker related 179.131.174.27

🇧🇷·More threats fromBrazil→AS·More threats fromTELEFONICA BRASIL S.A→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
177.174.95.245	57%	955
152.244.206.148	94%	23
179.193.42.41	80%	14
179.146.87.138	36%	7
187.90.255.101	62%	54

IP Address	Confidence	Events
191.255.52.36	98%	48
177.92.23.102	61%	3
31.56.44.105	94%	237
31.56.44.113	94%	240
31.56.44.128	96%	735