Check an IP Address, Domain Name, Subnet, or ASN

209.38.200.224 was found in our database!

$ whois 209.38.200.224

country·🇩🇪 Germany

city·Frankfurt am Main

isp·DigitalOcean, LLC

asn·AS14061

network·Standard

$ sikker risk 209.38.200.224scoring →

confidence

73%High

first_seen·Apr 25, 2026

last_seen·1h ago

sessions·20

events·20

$ sikker protocols 209.38.200.224

SMB

14 / 14

SIP

6 / 6

$ sikker summary 209.38.200.224

209.38.200.224 has a threat confidence score of 73%. This IP address from Germany (AS14061, DigitalOcean, LLC) has been observed in 20 honeypot sessions targeting SMB, SIP protocols. First observed on April 25, 2026, most recently active April 25, 2026.

$ sikker behaviors 209.38.200.224catalog →

mediumSip Request Uri Sip Nm2x

SIP request using sip:nm as the Request-URI, a malformed or placeholder target commonly observed in SIP scanning and fuzzing activity rather than legitimate client behavior.

$ sikker primitives 209.38.200.224

sip_request_uri_sip_nm2

$ sikker related 209.38.200.224

🇩🇪·More threats fromGermany→AS·More threats fromDigitalOcean, LLC→SMB·More threats targetingSMB→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
165.22.212.55	72%	40
104.248.160.105	61%	1,806
161.35.209.125	79%	29
138.197.179.186	67%	19
165.232.74.249	52%	96

IP Address	Confidence	Events
188.34.189.71	94%	44
45.65.112.108	85%	8,899
158.173.154.150	84%	8,454
217.216.108.129	90%	9,526
146.0.42.48	86%	78,624