Check an IP Address, Domain Name, Subnet, or ASN

172.86.93.168 was found in our database!

$ whois 172.86.93.168

country·🇩🇪 Germany

city·Frankfurt am Main

isp·aurologic GmbH

asn·AS30823

network·Standard

$ sikker risk 172.86.93.168scoring →

confidence

86%Very High

first_seen·Apr 23, 2026

last_seen·1h ago

sessions·7

events·7

$ sikker protocols 172.86.93.168

SIP

7 / 7

$ sikker summary 172.86.93.168

172.86.93.168 has a threat confidence score of 86%. This IP address from Germany (AS30823, aurologic GmbH) has been observed in 7 honeypot sessions targeting SIP protocols. Detected attack patterns include sip call id high entropy hex 32. First observed on April 23, 2026, most recently active April 24, 2026.

$ sikker behaviors 172.86.93.168catalog →

highSip Call Id High Entropy Hex 327x

SIP activity where Call-ID values exhibit high entropy and fixed 32-character hexadecimal format, indicating automated generation typically associated with scanning tools, fuzzing frameworks, or SIP enumeration activity.

$ sikker primitives 172.86.93.168

sip_call_id_hex_327 sip_call_id_alphanumeric_entropy7

$ sikker related 172.86.93.168

🇩🇪·More threats fromGermany→AS·More threats fromaurologic GmbH→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.86.93.173	98%	40
172.86.95.45	94%	2,930
172.86.94.48	41%	122
172.86.92.207	98%	68
172.86.94.38	88%	1,853

IP Address	Confidence	Events
193.24.210.169	79%	6,975
87.98.242.75	97%	30,761
43.157.1.84	95%	3,544
217.216.108.129	90%	7,951
146.0.42.48	86%	77,908