Check an IP Address, Domain Name, Subnet, or ASN

42.51.38.92 was found in our database!

$ whois 42.51.38.92

country·🇨🇳 China

city·Shenzhen

isp·Zhengzhou Fastidc Technology Co.,Ltd.

asn·AS56005

network·Standard

$ sikker risk 42.51.38.92scoring →

confidence

95%Very High

first_seen·Apr 21, 2026

last_seen·27m ago

sessions·146

events·146

$ sikker protocols 42.51.38.92

RDP

146 / 146

$ sikker summary 42.51.38.92

42.51.38.92 has a threat confidence score of 95%. This IP address from China (AS56005, Zhengzhou Fastidc Technology Co.,Ltd.) has been observed in 146 honeypot sessions targeting RDP protocols. First observed on April 21, 2026, most recently active April 24, 2026.

$ sikker behaviors 42.51.38.92catalog →

mediumRdp Nla Ntlm Authentication Attempt129x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 42.51.38.92

rdp_nla_ntlm_auth130

$ sikker related 42.51.38.92

🇨🇳·More threats fromChina→AS·More threats fromZhengzhou Fastidc Technology Co.,Ltd.→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
42.51.33.162	100%	440
42.51.45.85	94%	1,193
42.51.13.244	93%	633
42.51.32.228	100%	1,200
42.51.40.180	100%	770

IP Address	Confidence	Events
47.92.29.12	78%	15,707
118.190.113.81	85%	16,987
8.148.187.113	84%	1,109
58.211.125.146	58%	1,238
101.126.85.188	95%	829