Check an IP Address, Domain Name, Subnet, or ASN

37.77.56.6 was found in our database!

$ whois 37.77.56.6

country·🇪🇪 Estonia

city·Tallinn

isp·EstNOC OU

asn·AS206804

network·Standard

$ sikker risk 37.77.56.6scoring →

confidence

54%Medium

first_seen·May 4, 2026

last_seen·7h ago

sessions·2

events·2

$ sikker protocols 37.77.56.6

RDP

2 / 2

$ sikker summary 37.77.56.6

37.77.56.6 has a threat confidence score of 54%. This IP address from Estonia (AS206804, EstNOC OU) has been observed in 2 honeypot sessions targeting RDP protocols. First observed on May 4, 2026, most recently active May 5, 2026.

$ sikker behaviors 37.77.56.6catalog →

mediumRdp Nla Ntlm Authentication Attempt2x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 37.77.56.6

rdp_nla_ntlm_auth2

$ sikker related 37.77.56.6

🇪🇪·More threats fromEstonia→AS·More threats fromEstNOC OU→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.133.195.186	79%	2,355
192.159.101.5	28%	126
192.159.101.165	70%	4
37.77.56.246	36%	2
85.203.39.140	57%	4

IP Address	Confidence	Events
172.69.136.177	12%	5
172.69.136.234	5%	10
109.206.241.199	100%	1,025
95.85.245.51	88%	10
172.69.136.135	13%	5