Check an IP Address, Domain Name, Subnet, or ASN

144.172.111.225 was found in our database!

$ whois 144.172.111.225

country·🇺🇸 United States

city·Miami

isp·RouterHosting LLC

asn·AS14956

network·Standard

$ sikker risk 144.172.111.225scoring →

confidence

96%Very High

first_seen·Apr 24, 2026

last_seen·4m ago

sessions·175

events·175

$ sikker protocols 144.172.111.225

SIP

175 / 175

$ sikker summary 144.172.111.225

144.172.111.225 has a threat confidence score of 96%. This IP address from United States (AS14956, RouterHosting LLC) has been observed in 175 honeypot sessions targeting SIP protocols. First observed on April 24, 2026, most recently active April 24, 2026.

$ sikker behaviors 144.172.111.225catalog →

mediumSip Invite Random Call Id To Ip175x

Identifies SIP scanning or probing activity where an attacker sends INVITE requests directly to a target IP address using randomly generated Call-ID tokens. This pattern is commonly associated with VoIP reconnaissance, SIP endpoint discovery, and automated dialer or PBX attack tooling attempting to enumerate reachable SIP services.

$ sikker primitives 144.172.111.225

sip_invite_request175 sip_call_id_token_at_ip175

$ sikker related 144.172.111.225

🇺🇸·More threats fromUnited States→AS·More threats fromRouterHosting LLC→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
144.172.95.65	62%	32
144.172.116.209	22%	12
172.86.91.235	97%	57
172.86.116.48	93%	23
144.172.101.92	18%	7

IP Address	Confidence	Events
157.254.223.80	95%	4,238
98.81.60.48	79%	60
65.49.1.52	100%	2,109
64.62.197.182	100%	2,085
20.46.246.132	84%	237