Check an IP Address, Domain Name, Subnet, or ASN

82.223.13.32 was found in our database!

$ whois 82.223.13.32

country·🇪🇸 Spain

isp·IONOS SE

asn·AS8560

network·Standard

$ sikker risk 82.223.13.32scoring →

confidence

95%Very High

first_seen·Mar 12, 2026

last_seen·1m ago

sessions·981

events·989

$ sikker protocols 82.223.13.32

RDP

981 / 989

$ sikker summary 82.223.13.32

82.223.13.32 has a threat confidence score of 95%. This IP address from Spain (AS8560, IONOS SE) has been observed in 981 honeypot sessions targeting RDP protocols. First observed on March 12, 2026, most recently active March 25, 2026.

$ sikker behaviors 82.223.13.32catalog →

mediumRdp Nla Ntlm Authentication Attempt971x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 82.223.13.32

rdp_nla_ntlm_auth971

$ sikker related 82.223.13.32

🇪🇸·More threats fromSpain→AS·More threats fromIONOS SE→RDP·More threats targetingRDP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
87.106.147.36	99%	227,249
82.223.17.218	95%	747
82.223.10.125	95%	1,188
82.223.43.244	95%	725
82.223.35.19	95%	1,002

IP Address	Confidence	Events
82.223.33.25	95%	970
82.223.10.125	95%	1,194
212.230.117.125	56%	96
82.223.35.19	95%	1,007
82.223.43.244	95%	728