Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
109.199.103.252 has a threat confidence score of 80%. This IP address from France (AS51167, Contabo GmbH) has been observed in 481 honeypot sessions targeting SIP protocols. First observed on February 25, 2026, most recently active March 12, 2026.
Identifies SIP scanning or probing activity where an attacker sends INVITE requests directly to a target IP address using randomly generated Call-ID tokens. This pattern is commonly associated with VoIP reconnaissance, SIP endpoint discovery, and automated dialer or PBX attack tooling attempting to enumerate reachable SIP services.