Check an IP Address, Domain Name, Subnet, or ASN
147.93.185.113 has a threat confidence score of 93%. This IP address from United States (AS40021, Contabo Inc.) has been observed in 44 honeypot sessions targeting SIP protocols. First observed on April 13, 2026, most recently active April 16, 2026.
Automated SIP INVITE requests initiating direct call setup toward a numeric extension, indicating scripted VoIP interaction rather than passive capability probing. The client attempts to establish a call session (e.g., extension-to-extension dialing such as 100 → 100) using high-entropy Call-ID values, a pattern frequently associated with automated dialers, toll-fraud reconnaissance, or PBX abuse tooling. These interactions validate whether the endpoint accepts call initiation and may precede brute-force registration attempts, relay abuse, or fraudulent outbound call campaigns.