Looking up IP
Check an IP Address, Domain Name, Subnet, or ASN
31.70.66.9 has a threat confidence score of 97%. This IP address from United Kingdom (AS2856, British Telecommunications PLC) has been observed in 659 honeypot sessions targeting SIP protocols. First observed on May 3, 2026, most recently active May 4, 2026.
Identifies SIP scanning or probing activity where an attacker sends INVITE requests directly to a target IP address using randomly generated Call-ID tokens. This pattern is commonly associated with VoIP reconnaissance, SIP endpoint discovery, and automated dialer or PBX attack tooling attempting to enumerate reachable SIP services.