Check an IP Address, Domain Name, Subnet, or ASN

85.159.210.150 was found in our database!

$ whois 85.159.210.150

country·🇬🇧 United Kingdom

city·London

isp·Akamai Connected Cloud

asn·AS63949

network·Standard

$ sikker risk 85.159.210.150scoring →

confidence

49%Medium

first_seen·Apr 22, 2026

last_seen·1h ago

sessions·9

events·9

$ sikker protocols 85.159.210.150

HTTPS

5 / 5

RDP

3 / 3

ELASTICSEARCH

1 / 1

$ sikker summary 85.159.210.150

85.159.210.150 has a threat confidence score of 49%. This IP address from United Kingdom (AS63949, Akamai Connected Cloud) has been observed in 9 honeypot sessions targeting HTTPS, RDP, ELASTICSEARCH protocols. First observed on April 22, 2026, most recently active May 2, 2026.

$ sikker behaviors 85.159.210.150catalog →

mediumRdp Nla Ntlm Authentication Attempt1x

Identifies RDP clients attempting authentication using Network Level Authentication (NLA) with the NTLM challenge-response protocol. This occurs during the CredSSP negotiation phase before a remote desktop session is established and indicates an active credential authentication attempt against the RDP service

$ sikker primitives 85.159.210.150

elastic_http_get_request14 elastic_http_bad_request_path_probe12 elastic_root_path_probe2 rdp_nla_ntlm_auth1

$ sikker related 85.159.210.150

🇬🇧·More threats fromUnited Kingdom→AS·More threats fromAkamai Connected Cloud→HTTP·More threats targetingHTTPS→RDP·More threats targetingRDP→ELAS·More threats targetingELASTICSEARCH→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.104.11.4	93%	2,186
66.228.53.157	90%	1,176
172.236.119.165	92%	1,240
172.236.228.220	95%	2,348
172.234.217.129	91%	1,255

IP Address	Confidence	Events
51.89.235.201	88%	92,578
78.153.140.40	100%	5,451
193.181.46.24	98%	3,897
35.203.211.189	66%	124
213.166.84.44	23%	1