Check an IP Address, Domain Name, Subnet, or ASN

45.205.22.238 was found in our database!

$ whois 45.205.22.238

country·🇺🇸 United States

city·New York

isp·IncomparableHKNetwork Co., Limited

asn·AS141159

network·Standard

$ sikker risk 45.205.22.238scoring →

confidence

84%Very High

first_seen·Apr 9, 2026

last_seen·25d ago

sessions·17

events·17

$ sikker protocols 45.205.22.238

RDP

17 / 17

$ sikker summary 45.205.22.238

45.205.22.238 has a threat confidence score of 84%. This IP address from United States (AS141159, IncomparableHKNetwork Co., Limited) has been observed in 17 honeypot sessions targeting RDP protocols. First observed on April 9, 2026, most recently active April 10, 2026.

$ sikker behaviors 45.205.22.238catalog →

mediumRdp Nla Ntlm Authentication Attempt12x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 45.205.22.238

rdp_nla_ntlm_auth12

$ sikker related 45.205.22.238

🇺🇸·More threats fromUnited States→AS·More threats fromIncomparableHKNetwork Co., Limited→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
45.205.16.100	54%	2
103.117.138.14	56%	1
103.146.125.179	32%	42
45.205.16.135	34%	42
103.146.124.201	30%	2

IP Address	Confidence	Events
72.167.225.241	74%	7,718
164.90.148.8	91%	22
212.102.40.218	82%	49,450
72.167.54.139	78%	1,121
66.132.172.199	100%	764