Check an IP Address, Domain Name, Subnet, or ASN

216.126.225.101 was found in our database!

$ whois 216.126.225.101

country·🇺🇸 United States

city·Ogden

isp·RouterHosting LLC

asn·AS14956

network·Standard

$ sikker risk 216.126.225.101scoring →

confidence

54%Medium

first_seen·May 3, 2026

last_seen·4h ago

sessions·1

events·1

$ sikker protocols 216.126.225.101

SIP

1 / 1

$ sikker summary 216.126.225.101

216.126.225.101 has a threat confidence score of 54%. This IP address from United States (AS14956, RouterHosting LLC) has been observed in 1 honeypot sessions targeting SIP protocols. Detected attack patterns include sip call id high entropy hex 32. First observed on May 3, 2026, most recently active May 3, 2026.

$ sikker behaviors 216.126.225.101catalog →

highSip Call Id High Entropy Hex 321x

SIP activity where Call-ID values exhibit high entropy and fixed 32-character hexadecimal format, indicating automated generation typically associated with scanning tools, fuzzing frameworks, or SIP enumeration activity.

$ sikker primitives 216.126.225.101

sip_call_id_hex_321 sip_call_id_alphanumeric_entropy1

$ sikker related 216.126.225.101

🇺🇸·More threats fromUnited States→AS·More threats fromRouterHosting LLC→SIP·More threats targetingSIP→{ }·Browse allAttack Patterns→

Report IP WHOIS Lookup →

IP Address	Confidence	Events
172.86.70.20	23%	20
107.189.19.55	60%	8
45.59.123.160	74%	3
45.61.130.19	95%	1,054
107.189.24.162	72%	5

IP Address	Confidence	Events
15.204.157.11	91%	2,886
72.167.54.139	56%	51
202.91.32.11	99%	368
209.126.83.201	94%	211
43.153.30.114	95%	779