Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
173.220.52.26 has a threat confidence score of 98%. This IP address from United States (AS6128, Cablevision Systems Corp.) has been observed in 388 honeypot sessions targeting SIP, HTTP, HTTPS protocols. First observed on March 31, 2026, most recently active April 1, 2026.
Represents an unsolicited SIP INVITE request targeting a long numeric destination, with the request accepted for processing by the SIP server (100 Trying). While the Call-ID format appears consistent with legitimate SIP implementations, the absence of prior registration and the use of a PSTN-style numeric target indicate probing of call routing or gateway behavior rather than normal call setup. This behavior is commonly observed during early-stage toll-fraud reconnaissance or PBX routing validation.
Identifies HTTP requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration.
Identifies HTTPS requests targeting the web server root path ("/"), typically used for initial service discovery, host validation, or baseline content inspection prior to deeper enumeration