Check an IP Address, Domain Name, Subnet, or ASN

172.86.93.173 was found in our database!

$ whois 172.86.93.173

country·🇩🇪 Germany

city·Frankfurt am Main

isp·aurologic GmbH

asn·AS30823

network·Standard

$ sikker risk 172.86.93.173scoring →

confidence

98%Very High

first_seen·Apr 23, 2026

last_seen·6h ago

sessions·40

events·40

$ sikker protocols 172.86.93.173

SIP

40 / 40

$ sikker summary 172.86.93.173

172.86.93.173 has a threat confidence score of 98%. This IP address from Germany (AS30823, aurologic GmbH) has been observed in 40 honeypot sessions targeting SIP protocols. Detected attack patterns include sip call id high entropy hex 32. First observed on April 23, 2026, most recently active April 24, 2026.

$ sikker behaviors 172.86.93.173catalog →

highSip Call Id High Entropy Hex 3236x

SIP activity where Call-ID values exhibit high entropy and fixed 32-character hexadecimal format, indicating automated generation typically associated with scanning tools, fuzzing frameworks, or SIP enumeration activity.

$ sikker primitives 172.86.93.173

sip_call_id_hex_3239 sip_call_id_alphanumeric_entropy39

$ sikker related 172.86.93.173

🇩🇪·More threats fromGermany→AS·More threats fromaurologic GmbH→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.86.93.168	86%	7
172.86.95.45	94%	2,930
172.86.94.48	41%	122
172.86.92.207	98%	68
172.86.94.38	88%	1,853

IP Address	Confidence	Events
89.163.204.62	87%	92,698
217.216.108.129	90%	8,028
45.82.78.100	95%	1,497
178.104.124.251	95%	72
158.173.154.150	84%	6,415