Check an IP Address, Domain Name, Subnet, or ASN

208.109.34.31 was found in our database!

$ whois 208.109.34.31

country·🇺🇸 United States

isp·GoDaddy.com, LLC

asn·AS398101

network·Standard

$ sikker risk 208.109.34.31scoring →

confidence

97%Very High

first_seen·Apr 6, 2026

last_seen·10d ago

sessions·8,850

events·8,864

$ sikker protocols 208.109.34.31

RDP

8,850 / 8,864

$ sikker summary 208.109.34.31

208.109.34.31 has a threat confidence score of 97%. This IP address from United States (AS398101, GoDaddy.com, LLC) has been observed in 8,850 honeypot sessions targeting RDP protocols. First observed on April 6, 2026, most recently active April 30, 2026.

$ sikker behaviors 208.109.34.31catalog →

mediumRdp Nla Ntlm Authentication Attempt8798x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 208.109.34.31

rdp_nla_ntlm_auth8798

$ sikker related 208.109.34.31

🇺🇸·More threats fromUnited States→AS·More threats fromGoDaddy.com, LLC→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
72.167.225.241	76%	10,664
166.62.102.109	61%	2
72.47.208.90	90%	16
70.32.113.19	92%	25
184.168.146.42	96%	18

IP Address	Confidence	Events
155.138.210.119	67%	858
173.239.254.90	85%	693
172.86.105.127	89%	68
20.83.167.20	63%	72
104.224.31.96	93%	236