Check an IP Address, Domain Name, Subnet, or ASN

59.59.74.8 was found in our database!

$ whois 59.59.74.8

country·🇨🇳 China

isp·Chinanet

asn·AS4134

network·Standard

$ sikker risk 59.59.74.8scoring →

confidence

77%High

first_seen·Apr 18, 2026

last_seen·4m ago

sessions·8

events·8

$ sikker protocols 59.59.74.8

RDP

8 / 8

$ sikker summary 59.59.74.8

59.59.74.8 has a threat confidence score of 77%. This IP address from China (AS4134, Chinanet) has been observed in 8 honeypot sessions targeting RDP protocols. First observed on April 18, 2026, most recently active April 19, 2026.

$ sikker behaviors 59.59.74.8catalog →

mediumRdp Nla Ntlm Authentication Attempt8x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 59.59.74.8

rdp_nla_ntlm_auth8

$ sikker related 59.59.74.8

🇨🇳·More threats fromChina→AS·More threats fromChinanet→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
61.147.209.31	57%	371
171.15.129.8	95%	2,154
61.145.163.164	47%	406
49.88.156.34	99%	7,252
222.89.169.98	100%	1,433

IP Address	Confidence	Events
47.94.53.14	82%	576
8.138.98.143	82%	11,351
175.42.32.205	96%	9,214
115.190.16.6	95%	1,172
81.69.222.171	96%	2,289