Check an IP Address, Domain Name, Subnet, or ASN

172.86.67.130 was found in our database!

$ whois 172.86.67.130

country·🇩🇪 Germany

city·Frankfurt am Main

isp·RouterHosting LLC

asn·AS14956

network·Standard

$ sikker risk 172.86.67.130scoring →

confidence

98%Very High

first_seen·Apr 16, 2026

last_seen·55m ago

sessions·1,390

events·1,390

$ sikker protocols 172.86.67.130

SIP

1,390 / 1,390

$ sikker summary 172.86.67.130

172.86.67.130 has a threat confidence score of 98%. This IP address from Germany (AS14956, RouterHosting LLC) has been observed in 1,390 honeypot sessions targeting SIP protocols. Detected attack patterns include sip call id high entropy hex 32. First observed on April 16, 2026, most recently active April 19, 2026.

$ sikker behaviors 172.86.67.130catalog →

highSip Call Id High Entropy Hex 3216x

SIP activity where Call-ID values exhibit high entropy and fixed 32-character hexadecimal format, indicating automated generation typically associated with scanning tools, fuzzing frameworks, or SIP enumeration activity.

$ sikker primitives 172.86.67.130

sip_invite_request1166 sip_call_id_hex_3216 sip_call_id_alphanumeric_entropy16

$ sikker related 172.86.67.130

🇩🇪·More threats fromGermany→AS·More threats fromRouterHosting LLC→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
144.172.95.158	99%	3,166
144.172.101.50	83%	96
172.86.69.91	89%	42
172.86.70.20	24%	19
216.126.225.19	89%	859

IP Address	Confidence	Events
193.24.210.169	78%	5,072
216.24.213.226	88%	14,301
85.215.254.181	77%	400
131.189.177.42	49%	484
178.63.154.178	84%	56