Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
2.136.157.175 has a threat confidence score of 89%. This IP address from Spain (AS3352, Telefonica De Espana S.a.u.) has been observed in 38 honeypot sessions targeting RDP protocols. First observed on April 13, 2026, most recently active April 14, 2026.
Identifies RDP clients attempting authentication using the legacy RDP security mode where credentials are exchanged through the older RDP security layer instead of Network Level Authentication (NLA). This indicates the client negotiated legacy plaintext authentication during the RDP security handshake