Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
104.194.159.157 has a threat confidence score of 95%. This IP address from Germany (AS14956, RouterHosting LLC) has been observed in 208 honeypot sessions targeting SIP protocols. Detected attack patterns include sip call id high entropy hex 32. First observed on April 8, 2026, most recently active April 9, 2026.
SIP activity where Call-ID values exhibit high entropy and fixed 32-character hexadecimal format, indicating automated generation typically associated with scanning tools, fuzzing frameworks, or SIP enumeration activity.