Check an IP Address, Domain Name, Subnet, or ASN

31.56.44.58 was found in our database!

$ whois 31.56.44.58

country·🇧🇷 Brazil

city·São Paulo

isp·Gamers Club Ltda

asn·AS268624

network·Standard

$ sikker risk 31.56.44.58scoring →

confidence

93%Very High

first_seen·Apr 26, 2026

last_seen·1h ago

sessions·37

events·37

$ sikker protocols 31.56.44.58

RDP

37 / 37

$ sikker summary 31.56.44.58

31.56.44.58 has a threat confidence score of 93%. This IP address from Brazil (AS268624, Gamers Club Ltda) has been observed in 37 honeypot sessions targeting RDP protocols. First observed on April 26, 2026, most recently active April 26, 2026.

$ sikker behaviors 31.56.44.58catalog →

mediumRdp Nla Ntlm Authentication Attempt30x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 31.56.44.58

rdp_nla_ntlm_auth30

$ sikker related 31.56.44.58

🇧🇷·More threats fromBrazil→AS·More threats fromGamers Club Ltda→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
31.56.44.38	92%	29
31.56.44.44	79%	66
31.56.44.59	86%	42
31.56.44.34	87%	17
31.56.44.128	85%	27

IP Address	Confidence	Events
31.56.44.87	88%	51
172.64.222.12	9%	27
45.172.144.64	96%	514
191.6.167.206	87%	23
31.56.44.128	87%	31