Check an IP Address, Domain Name, Subnet, or ASN
172.110.223.70 has a threat confidence score of 91%. This IP address from Hong Kong (AS23470, ReliableSite.Net LLC) has been observed in 23 honeypot sessions targeting SIP protocols. First observed on March 16, 2026, most recently active March 17, 2026.
Automated SIP INVITE requests initiating direct call setup toward a numeric extension, indicating scripted VoIP interaction rather than passive capability probing. The client attempts to establish a call session (e.g., extension-to-extension dialing such as 100 → 100) using high-entropy Call-ID values, a pattern frequently associated with automated dialers, toll-fraud reconnaissance, or PBX abuse tooling. These interactions validate whether the endpoint accepts call initiation and may precede brute-force registration attempts, relay abuse, or fraudulent outbound call campaigns.