Check an IP Address, Domain Name, Subnet, or ASN

192.81.131.150 was found in our database!

$ whois 192.81.131.150

country·🇺🇸 United States

city·Fremont

isp·Akamai Connected Cloud

asn·AS63949

network·Standard

$ sikker risk 192.81.131.150scoring →

confidence

59%Medium

first_seen·Mar 2, 2026

last_seen·1h ago

sessions·55

events·55

$ sikker protocols 192.81.131.150

MONGODB

41 / 41

HTTPS

5 / 5

POSTGRES

4 / 4

RDP

3 / 3

ELASTICSEARCH

2 / 2

$ sikker summary 192.81.131.150

192.81.131.150 has a threat confidence score of 59%. This IP address from United States (AS63949, Akamai Connected Cloud) has been observed in 55 honeypot sessions targeting MONGODB, HTTPS, POSTGRES, RDP, ELASTICSEARCH protocols. First observed on March 2, 2026, most recently active March 29, 2026.

$ sikker behaviors 192.81.131.150catalog →

mediumRdp Nla Ntlm Authentication Attempt1x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 192.81.131.150

elastic_http_get_request18 elastic_http_bad_request_path_probe12 elastic_root_path_probe3 mongodb_ismaster1 rdp_nla_ntlm_auth1 elastic_nodes_enumeration1

$ sikker related 192.81.131.150

🇺🇸·More threats fromUnited States→AS·More threats fromAkamai Connected Cloud→MONG·More threats targetingMONGODB→HTTP·More threats targetingHTTPS→POST·More threats targetingPOSTGRES→RDP·More threats targetingRDP→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.236.228.208	92%	1,859
45.33.88.37	23%	1
172.104.11.4	92%	1,732
66.228.53.136	87%	811
66.228.53.162	82%	760

IP Address	Confidence	Events
144.172.105.188	94%	17,862
44.225.53.53	95%	763
92.118.39.62	100%	382,162
92.118.39.72	100%	118,632
159.89.231.117	94%	160