Check an IP Address, Domain Name, Subnet, or ASN

172.86.89.174 was found in our database!

$ whois 172.86.89.174

country·🇺🇸 United States

city·Dallas

isp·RouterHosting LLC

asn·AS14956

network·Standard

$ sikker risk 172.86.89.174scoring →

confidence

96%Very High

first_seen·May 1, 2026

last_seen·7m ago

sessions·242

events·242

$ sikker protocols 172.86.89.174

SIP

242 / 242

$ sikker summary 172.86.89.174

172.86.89.174 has a threat confidence score of 96%. This IP address from United States (AS14956, RouterHosting LLC) has been observed in 242 honeypot sessions targeting SIP protocols. First observed on May 1, 2026, most recently active May 1, 2026.

$ sikker behaviors 172.86.89.174catalog →

mediumSip Invite Random Call Id To Ip225x

Identifies SIP scanning or probing activity where an attacker sends INVITE requests directly to a target IP address using randomly generated Call-ID tokens. This pattern is commonly associated with VoIP reconnaissance, SIP endpoint discovery, and automated dialer or PBX attack tooling attempting to enumerate reachable SIP services.

$ sikker primitives 172.86.89.174

sip_invite_request246 sip_call_id_token_at_ip230

$ sikker related 172.86.89.174

🇺🇸·More threats fromUnited States→AS·More threats fromRouterHosting LLC→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
104.194.159.95	99%	206
144.172.88.228	100%	1,795
144.172.95.65	62%	229
144.172.100.249	77%	38
107.189.27.179	99%	128

IP Address	Confidence	Events
185.218.138.5	97%	3,792
74.82.47.23	43%	93
74.82.47.43	53%	88
74.82.47.35	60%	78
74.82.47.7	54%	57