We found that when tested with a successful host, use the ip fail; all the same host; do not go the same protocol:
In the early days (Windows 2000, XP and 2003) it was possible to configure Service Principals Names (SPNs) with IP addresses. And then in Windows Vista and Windows Server 2008 it was removed in the Kerberos client and IP addresses on services didn’t work. Since then if a client tries to connect to e.g. a share by its IP address it would fall back to NTLM
High windows version of the ip default ntlm certified before using kerberos authentication host. (Ip support can be configured using kerberos protocol)