Check an IP Address, Domain Name, Subnet, or ASN

31.56.44.105 was found in our database!

$ whois 31.56.44.105

country·🇧🇷 Brazil

city·São Paulo

isp·Gamers Club Ltda

asn·AS268624

network·Standard

$ sikker risk 31.56.44.105scoring →

confidence

81%Very High

first_seen·Apr 26, 2026

last_seen·54m ago

sessions·11

events·11

$ sikker protocols 31.56.44.105

RDP

11 / 11

$ sikker summary 31.56.44.105

31.56.44.105 has a threat confidence score of 81%. This IP address from Brazil (AS268624, Gamers Club Ltda) has been observed in 11 honeypot sessions targeting RDP protocols. First observed on April 26, 2026, most recently active April 26, 2026.

$ sikker behaviors 31.56.44.105catalog →

mediumRdp Nla Ntlm Authentication Attempt10x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 31.56.44.105

rdp_nla_ntlm_auth10

$ sikker related 31.56.44.105

🇧🇷·More threats fromBrazil→AS·More threats fromGamers Club Ltda→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
31.56.44.113	88%	21
31.56.44.59	83%	33
31.56.44.87	83%	35
31.56.44.58	92%	32
31.56.44.24	85%	17

IP Address	Confidence	Events
201.14.16.137	94%	50
45.172.144.64	96%	502
31.56.44.113	88%	21
170.78.129.41	59%	11
31.56.44.59	83%	33