Check an IP Address, Domain Name, Subnet, or ASN

144.172.95.158 was found in our database!

$ whois 144.172.95.158

country·🇺🇸 United States

city·Ogden

isp·RouterHosting LLC

asn·AS14956

network·Standard

$ sikker risk 144.172.95.158scoring →

confidence

99%Very High

first_seen·Apr 16, 2026

last_seen·1m ago

sessions·3,218

events·3,218

$ sikker protocols 144.172.95.158

SIP

3,218 / 3,218

$ sikker summary 144.172.95.158

144.172.95.158 has a threat confidence score of 99%. This IP address from United States (AS14956, RouterHosting LLC) has been observed in 3,218 honeypot sessions targeting SIP protocols. Detected attack patterns include sip call id high entropy hex 32. First observed on April 16, 2026, most recently active April 19, 2026.

$ sikker behaviors 144.172.95.158catalog →

highSip Call Id High Entropy Hex 3230x

SIP activity where Call-ID values exhibit high entropy and fixed 32-character hexadecimal format, indicating automated generation typically associated with scanning tools, fuzzing frameworks, or SIP enumeration activity.

$ sikker primitives 144.172.95.158

sip_invite_request2270 sip_call_id_hex_3234 sip_call_id_alphanumeric_entropy34

$ sikker related 144.172.95.158

🇺🇸·More threats fromUnited States→AS·More threats fromRouterHosting LLC→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
144.172.101.50	83%	98
172.86.67.130	98%	1,390
172.86.69.91	89%	42
172.86.70.20	24%	19
216.126.225.19	89%	859

IP Address	Confidence	Events
185.218.138.27	97%	21,239
13.220.230.230	99%	5,624
38.146.219.190	77%	3,010
209.222.101.54	99%	65,649
159.89.83.56	72%	325