Check an IP Address, Domain Name, Subnet, or ASN

42.51.45.85 was found in our database!

$ whois 42.51.45.85

country·🇨🇳 China

city·Shenzhen

isp·Zhengzhou Fastidc Technology Co.,Ltd.

asn·AS56005

network·Standard

$ sikker risk 42.51.45.85scoring →

confidence

92%Very High

first_seen·Mar 14, 2026

last_seen·1m ago

sessions·114

events·114

$ sikker protocols 42.51.45.85

RDP

114 / 114

$ sikker summary 42.51.45.85

42.51.45.85 has a threat confidence score of 92%. This IP address from China (AS56005, Zhengzhou Fastidc Technology Co.,Ltd.) has been observed in 114 honeypot sessions targeting RDP protocols. First observed on March 14, 2026, most recently active March 21, 2026.

$ sikker behaviors 42.51.45.85catalog →

mediumRdp Nla Ntlm Authentication Attempt104x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 42.51.45.85

rdp_nla_ntlm_auth104

$ sikker related 42.51.45.85

🇨🇳·More threats fromChina→AS·More threats fromZhengzhou Fastidc Technology Co.,Ltd.→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
42.51.13.244	85%	128
42.51.41.137	100%	1,062
42.51.49.64	45%	5
42.51.40.180	100%	748
42.51.49.239	37%	19

IP Address	Confidence	Events
139.224.112.216	83%	11,261
123.188.239.125	98%	2,752
1.95.67.60	96%	2,155
122.51.21.227	96%	1,994
175.178.128.197	96%	1,658