Check an IP Address, Domain Name, Subnet, or ASN

52.71.61.151 was found in our database!

$ whois 52.71.61.151

country·🇺🇸 United States

city·Ashburn

isp·Amazon.com, Inc.

asn·AS14618

network·Standard

$ sikker risk 52.71.61.151scoring →

confidence

43%Medium

first_seen·May 5, 2026

last_seen·1h ago

sessions·1

events·1

$ sikker protocols 52.71.61.151

RDP

1 / 1

$ sikker summary 52.71.61.151

52.71.61.151 has a threat confidence score of 43%. This IP address from United States (AS14618, Amazon.com, Inc.) has been observed in 1 honeypot sessions targeting RDP protocols. First observed on May 5, 2026, most recently active May 5, 2026.

$ sikker behaviors 52.71.61.151catalog →

mediumRdp Nla Ntlm Authentication Attempt1x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 52.71.61.151

rdp_nla_ntlm_auth1

$ sikker related 52.71.61.151

🇺🇸·More threats fromUnited States→AS·More threats fromAmazon.com, Inc.→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
54.166.166.48	43%	1
18.215.234.114	93%	568
98.89.204.118	81%	1,211
44.215.219.236	79%	1,161
52.21.227.35	76%	1,236

IP Address	Confidence	Events
136.37.89.108	94%	72
87.121.84.8	82%	280
172.70.126.57	10%	6
72.167.54.139	77%	969
174.138.183.30	73%	5